The information was stolen thanks to a unique software planted within their point-of-sale and cash register systems.<\/p>\n
The attack siphoned a continuous stream of financial details, up until last month when it was discovered.<\/p>\n
It is now one of the largest known breaches of a major retailer, alongside Target\u2019s 2013 breach, Home Depot\u2019s 2014 breach, and 2017\u2019s Equifax breach<\/a>.<\/p>\n It begs the question, how do hackers manage such attacks? What tools and systems do they use to gather all that sensitive information?<\/p>\n One of the most common forms of attack is called phishing, which essentially clones an official portal or website making you think you\u2019re visiting an actual brand\u2019s page.<\/p>\n Generally, they trick you into providing personal information when you try to log in, such as payment information.<\/p>\n Ransomware is another common attack, which seizes a system and data and then demands a monetary payment to re-access.<\/p>\n Unfortunately, even after payment, those affected hardly ever get access to their data and systems back.<\/p>\n In the case of large-scale data breaches, such as those Saks encountered, hackers will take advantage of security vulnerabilities within their internal systems.<\/p>\n In the most recent case, the thieves gained direct access to payment systems and stole data from customers making purchases at retail brick-and-mortar stores and online. The major Target breach involved a similar attack.<\/p>\n In Equifax\u2019s case, the breach was a bit less complicated. Hackers gained access to the companies virtual system and made off with data files containing sensitive details.<\/p>\n If and when these data files are not properly protected \u2014 using encryption or the like \u2014 the hackers can read sensitive information contained within the files.<\/p>\n It\u2019s not a secret that for these kinds of attacks, negligence is one of the most damaging problems \u2014 they can easily prevent or stunt using proper security measures.<\/p>\n The problem with modern attacks and breaches is that the onus for proper security belongs to everyone, from the store, to the systems and electronics providers, to even you, the consumer.<\/p>\n It\u2019s such a fragmented responsibility that it\u2019s truly tough to maintain in any reasonable manner. You can do your best, but there\u2019s no guarantee the other involved parties will.<\/p>\n That doesn\u2019t mean you shouldn\u2019t focus on maintaining personal security when you can, however.<\/p>\n It\u2019s important that companies have both in-store and online security measures in place, such as real-time notifications, two-factor authentication, verification checks and captchas.<\/p>\n Even an unsecured CMS can have serious repercussions<\/a>, which is why brands must also practice good security too.<\/p>\n While many of the above descriptors are generalized, hackers tend to use the same methods and vulnerabilities to gain access to various systems.<\/p>\n What we didn\u2019t cover is the common issue of improper personal security.<\/p>\n 1. Use strong passwords<\/span><\/p>\n Using strong passwords with a healthy combination of upper and lowercase letters, as well as numbers and symbols, can make it more difficult for anyone to guess or discern your account info.<\/p>\n More importantly, never use the same password across various accounts. If one is compromised, then hackers are smart enough to try using it for other accounts associated with your particular email or username.<\/p>\n They could effectively gain access to even more accounts and information using the one password.<\/p>\n It\u2019s good practice to use strong passwords, never reuse them and never share them with friends, family or colleagues. Software like Lastpass can keep tabs on your passwords so you won’t forget.<\/p>\nHow hackers make their mark<\/h2>\n
How can you protect your data?<\/h2>\n
![\"Lastpass\"](\"https:\/\/images.sftcdn.net\/images\/t_optimized,f_auto\/p\/a3758f98-9b22-11e6-87f8-00163ec9f5fa\/2829086021\/lastpass-logo.png\"){kind=logo}
\r\n <\/div>\r\n