When hackers look for targets, they typically focus on big organizations because they’re the ones with the most credit cards, state secrets and other lucrative hauls, right? Wrong. As the widely reported Target credit card breach shows, hackers often focus on small organizations as a way to attack large enterprises and government agencies.
In February 2014, Target HVAC contractor Fazio Mechanical Services confirmed that it was “a victim of a sophisticated cyber attack operation.” Fazio had a connection to Target’s IT network to facilitate electronic billing, contract submission and project management. That connection appears to have created the . . .