Target: Hackers posed as vendor to access our systems

Last Updated Jan 30, 2014 6:19 AM EST

Target said Wednesday that investigators have found that hackers stole credentials from a vendor to access the retailer's systems and pilfer about 40 million debit and credit card numbers as well as personal information for another 70 million people. 

Spokeswoman Molly Snyder declined to comment on further details, such as the vendor's identity or how the hackers stole the credentials, citing the ongoing nature of the investigation. 

Snyder did say that, since Minneapolis-based Target Corp. confirmed the breach on Dec. 15, it has taken extra precautions such as limiting or updating access to some platforms. Target says it has been "able to eliminate the malware and close the access."

Last week, some card numbers of Target customers from South Texas turned up in the arrest of a pair of Mexican citizens at the U.S.-Mexico border. But experts believe the attack's original perpetrators will be difficult to locate. 

Earlier Wednesday, Attorney General Eric Holder said the Justice Department is committed to tracking down the thieves. 

In an appearance before the Senate Judiciary Committee, Holder said the government also will hunt down any people and groups that exploit the stolen data through credit card fraud. 

Target says it is working with the Secret Service and the Justice Department in response to the data breach.

Comments

Market Data

Watch CBSN Live

Watch CBS News anytime, anywhere with the new 24/7 digital news network. Stream CBSN live or on demand for FREE on your TV, computer, tablet, or smartphone.

Watch Now

Market News

Stock Watchlist

New Android App

For your Android phone and tablet, download the FREE redesigned app, featuring CBSN, live 24/7 news.

Download
The all new
CBS News App for Android® for iPad® for iPhone®
Fully redesigned. Featuring CBSN, 24/7 live news. Get the App