Big security glitch Target.com, Amazon and others haven't fixed - My29 WFTC Minneapolis-St. Paul

The big security glitch Target.com, Amazon and others haven't fixed

Posted: Updated:

Some major retail websites have a security glitch that could put customers' personal information in the wrong hands -- and one of those sites is Target.com.

Target Corp. is certainly familiar with security issues. Over the busy Black Friday holiday shopping season, the personal information of an estimated 110 million customers was compromised. Now, a local security expert says a "misconfiguration of encryption software" could allow hackers to use stolen information to go on shopping sprees online and leave unsuspecting customers with the tab.

Since the massive data breach at Target last year, the company has tried to reassure customers that their credit card and personal information is safe and secure -- but Mark Lanterman, CEO of Computer Forensic Services, says there's one gaping flaw the bulls eye brand hasn't zeroed in on yet.

"Nobody's perfect, and I'm sure they've done an end-to-end security audit, but they missed this," he said.

In January, Lanterman explained how hackers could steal customers' user names and passwords from some of the biggest retail sites -- including Target.com -- with under $100 in equipment.

All the hackers have to do is set up a Wi-Fi network that prevents encryption under a familiar name in a public space -- like a coffee shop. Then, when people sign in, the hacker can see their private information in the lines of code.

Yet, three months later, Target remains one of several major companies that still hasn't fixed the glitch.

"My understanding is: Target is aware of this and their perspective is, 'This is a problem with the Internet,' it has nothing to do with their webpage and there's nothing they could do to fix it anyway," Lanterman said.

The only problem is that's not true. So far, TCF Bank, PayPal and even MNsure have closed that same flaw -- sometimes in less than a day.

Furthermore, Lanterman said that even though Target claims its website is secure, it's clearly not.

"I would control your mailing address," he explained. "I would have access to your credit card information, and I could charge things on your account -- and I shouldn’t be able to do that."

Target isn't alone. Lanterman says companies like Apple, eBay and Amazon.com have the same problem -- but none of them have already had a massive security breach that caused customer confidence to take a big hit.

"You can't just put your head in the sand and hope this goes away," Lanterman said. "Just fix it."

Lanterman said customers can protect themselves by bringing their own Internet on the go via a hotspot.

  • Most Popular StoriesMost Popular StoriesMore>>

  • Worker electrocuted on CapX2020 power line near Fairfax, Minn.

    Worker electrocuted on CapX2020 power line near Fairfax, Minn.

    Monday, July 28 2014 9:05 PM EDT2014-07-29 01:05:45 GMT
    One worker was electrocuted and another remains hospitalized following a workplace accident along the CapX2020 power line northeast of Fairfax, Minn.
    One worker was electrocuted and another remains hospitalized following a workplace accident along the CapX2020 power line northeast of Fairfax, Minn.
  • Pawn America robbers overheard bragging at Georgia hotel

    Pawn America robbers overheard bragging at Georgia hotel

    Monday, July 28 2014 4:59 PM EDT2014-07-28 20:59:20 GMT
    A nationwide warrant has been issued for the father-son duo suspected of robbing a Pawn America store in Roseville, Minn. after they were overheard bragging about their heist at Georgia hotel.
    A nationwide warrant has been issued for the father-son duo suspected of robbing a Pawn America store in Roseville, Minn. after they were overheard bragging about their heist at Georgia hotel.
  • 5 Level III sex offenders register in St. Paul; meeting set

    5 Level III sex offenders register in St. Paul; meeting set

    Monday, July 28 2014 8:44 PM EDT2014-07-29 00:44:57 GMT
    With a handful of predatory offenders registering to live in St. Paul neighborhoods, police are preparing to hold a community meeting at 6 p.m. on Thursday, but officers insist they are not trying to boost fears.
    With a handful of predatory offenders registering to live in St. Paul neighborhoods, police are preparing to hold a community meeting at 6 p.m. on Thursday, but officers insist they are not trying to boost fears.
Widgets Magazine
Powered by WorldNow

WFTC-TV
11358 Viking Drive
Eden Prairie, MN 55344

Phone: (952) 944-9999
Fax: (952) 942-0455

Didn't find what you were looking for?
All content © Copyright 2000 - 2014 Fox Television Stations, Inc. and Worldnow. All Rights Reserved.
Privacy Policy | Terms of Service | Ad Choices