Here is the key graph from the Krebs article "It's not immediately clear why Target would have given an HVAC company external network access, or why that access would not be cordoned off from Target's payment system network. But according to a cybersecurity expert at a large retailer who asked not to be named because he did not have permission to speak on the record, it is common for large retail operations to have a team that routinely monitors energy consumption and temperatures in stores to save on costs (particularly at night) and to alert store managers if temperatures in the stores fluctuate outside of an acceptable range that could prevent customers from shopping at the store." On Thu, Feb 6, 2014 at 4:30 PM, Peter Kurilecz <[log in to unmask]>wrote: > > Bill > I think that the HVAC company had access to other parts of the TARGET > environment, not necessarily the POS system. > > On Thu, Feb 6, 2014 at 3:42 PM, Roach, Bill <[log in to unmask]> wrote: > >> Can someone please explain why an HVAC company (or system) would have >> access permissions to a POS system? >> >> >> > > > -- > Peter Kurilecz CRM CA IGP > [log in to unmask] > Dallas, Texas > Save our in-boxes! http://emailcharter.org > http://twitter.com/RAINbyte > http://tech.groups.yahoo.com/group/RAINbyte/ > http://paper.li/RAINbyte/rainbyte > http://pinterest.com/pakurilecz/archives/ > http://pinterest.com/pakurilecz/records-management/ > http://www.linkedin.com/in/peterakurilecz > Information not relevant for my reply has been deleted to reduce the > electronic footprint and to save the sanity of digest subscribers > -- Peter Kurilecz CRM CA IGP [log in to unmask] Dallas, Texas Save our in-boxes! http://emailcharter.org http://twitter.com/RAINbyte http://tech.groups.yahoo.com/group/RAINbyte/ http://paper.li/RAINbyte/rainbyte http://pinterest.com/pakurilecz/archives/ http://pinterest.com/pakurilecz/records-management/ http://www.linkedin.com/in/peterakurilecz Information not relevant for my reply has been deleted to reduce the electronic footprint and to save the sanity of digest subscribers List archives at http://lists.ufl.edu/archives/recmgmt-l.html Contact [log in to unmask] for assistance To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message. mailto:[log in to unmask]
