MisuseRetail & ConsumerFinancial ServicesRetailPrivilege AbuseCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Target Corporation

bd_a9fe26c3d0802016 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 22, 2008

To disclose

—

Affected

3state residents only

Confidence

68%

Full breach record for Target Corporation →3 incidents on file

Target notified the New Hampshire Attorney General on January 22, 2008, regarding an insider threat incident involving three call center employees who accessed Target Visa account information and placed fraudulent charges. Approximately 3 New Hampshire residents were affected. Data compromised included names, addresses, account numbers, SSNs, and phone numbers. Target terminated the employees, renumbered affected accounts, removed fraudulent charges, and provided one year of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jan 22, 2008

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Target Corporation
norm: target

Name: Target Corporation
norm: target
Industry: Retail & ConsumerllmFinancial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jan 23, 2008
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Regulator citations: Filed notification with New Hampshire Office of the Attorney General pursuant to New Hampshire Rev. Stat. § 359-C:20
Initial access: insider_action

During the incident: Terminated three employees involved in the incident
Launched an investigation
Renumbered all Target Visa accounts that appear to have experienced fraudulent activity
Removed fraudulent charges identified on affected accounts
Renumbered accounts that experienced the same pattern of access as a precaution
Mailed letters to affected New Hampshire residents
Provided a one-year paid subscription to Experian's Triple Advantage Monitoring
Changes made: Provided free credit monitoring and identity theft recovery program through Experian
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/target-20080122.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 22, 2008
Raw hash: 93ab339e2b8dcc6f6aa1b3aaea430aba358dc49c86124afe75f02617687adc50

Reporting entityTarget Corporation

Victim entityTarget Corporation

IncidentInsider

Stated responseTerminated three employees involved in the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov