Page 2 of 2 Previous
“It can happen to anybody,” he said.
Some analysts believe the amount of fraud resulting from the breach might be relatively low. But Target’s expenses for the fraud could be much higher, they added, if it has to reimburse banks for fraud losses and card reissuing costs, and pay penalties to credit issuers.
Avivah Litan, a financial services security analyst at Connecticut-based research firm Gartner, said that in most breaches no more than 10 percent of the stolen card numbers get used for fraud, largely because there is a glut of stolen numbers on the black market.
“In the end the fraud committed will probably be $25 million or less,” Litan said.
The timing of the breach, and its disclosure less than a week before Christmas, makes the situation potentially damaging for Target and complicates its response.
“How many people right now are looking under their tree thinking, ‘Uh … I can pick out five different packages that all came from Target during that exact time,’ ” said James Wester, research director for global payments at Framingham, Mass.-based IDC. “This is probably going to cause some pretty serious ramifications.”
Marcus Rogers, a professor of cyberforensics at Purdue University, said one option to prevent the risk of compromised card numbers being used by thieves is to immediately cancel the cards and issue new ones.
But Rogers said canceling huge numbers of credit and debit cards in the late days of the holiday season would cause “chaos” that retailers want to avoid so close to Christmas.
“For the thieves, the timing is no coincidence,” Rogers said. “They are betting that Target and the credit card companies don’t want to hurt the economy by canceling the stolen cards.”
Target said it will close and replace its own credit cards only after evidence of theft.
A Visa spokeswoman said Visa also believes it’s unnecessary to pre-emptively cancel.
“Unauthorized access does not equal fraudulent activity,” Target’s Boylan said.
Staff writer John Ewoldt contributed to this report.
Jennifer Bjorhus • 612-673-4683
Steve Alexander • 612-673-4553