Target Wish List App Exposes Users’ Data to a Potential Breach -- Security Today

Target Wish List App Exposes Users' Data to a Potential Breach

By Sydny Shepard
Dec 16, 2015

Hackers can access your personal information from Target – again – thanks to a flaw in the retailer’s mobile app.

In a blog post, security researchers from Avast revealed the flaw, wish allows unauthorized access to customers’ addresses, phone numbers and other personal information from wish lists created with the Target app. Target shoppers do catch a break this Christmas season as credit card information doesn’t seem to appear to be stored with the wish lists.

Avast said it discovered the flaw while examining the security and privacy levels of various mobile buying apps. During their investigation, researchers looked at what permissions were granted to users, in additions to trying to hack the apps.

As of mid-December, Target has been notified of the problem and has disabled certain elements of its wish list.

“We apologize for any challenges guests may be facing while trying to access their registry," Molly Snyder, a communications manager at Target, said in a statement. "Our teams are working diligently overnight to resume full functionality."

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

Fenway Park Enhances Security Efficiency via Connected Platform

Johnson Controls implementation achieves 95% remote resolution rate while maintaining historic ballpark integrity. Read Now
Synack Launches Assessment to Counter AI-Driven Threats

The new offering uses autonomous agents and human researchers to identify vulnerabilities before they are exploited by offensive AI. Read Now
Healthcare Workers Demand Better Safety Measures

New research shows 68% of healthcare staff faced violence last year, with many prioritizing security features over continuous location tracking. Read Now
- Facility Security
- Hospital
- Physical Security
Banks Modernize Security with ProdataKey's Scalable Cloud Access Control

Regional financial institution unifies security across dozens of branches using remote management and automated compliance reporting tools. Read Now
- Access Control
- Physical Security
- Facility Security
Americans Overconfident Despite Rising Cyber Risks

New survey data reveals a significant gap between perceived digital safety and the actual security habits of U.S. consumers. Read Now
- Cybersecurity
- Data Security
- Risk Management

Artificial Intelligence

Security Today eNews

Sign up today for essential industry news and product information that can help you stay afloat in the fast-paced world of security.

Email Address*Country*

Please type the letters/numbers you see above.

Webinars

Whitepapers

New Products

Mobile Safe Shield

SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.
EasyGate SPT SPD

Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.
Luma x20

Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”