{"id":707,"date":"2014-01-11T16:54:06","date_gmt":"2014-01-11T16:54:06","guid":{"rendered":"http:\/\/paulgurney.com\/whats_new_blog\/?p=707"},"modified":"2014-01-17T15:45:24","modified_gmt":"2014-01-17T15:45:24","slug":"target-website-hiding-its-data-theft-warning","status":"publish","type":"post","link":"https:\/\/paulgurney.com\/whats_new_blog\/2014\/01\/target-website-hiding-its-data-theft-warning\/","title":{"rendered":"Target website hiding its data theft warning"},"content":{"rendered":"<p>Target&#8217;s had a big red target leveled at its data systems recently; the intrusion and theft of over 100 million consumer credit &amp; debit card information is almost the <a title=\"Target breach and theft of credit card data\" href=\"http:\/\/www.nytimes.com\/2013\/12\/20\/technology\/target-stolen-shopper-data.html\" target=\"_blank\">largest in history<\/a>.<\/p>\n<p>It&#8217;s website features a notice to consumers; but strangely, 2 seconds after the home page loads, an ad overlay obscures the warning text and link.<\/p>\n<p>Purposeful or by accident, it&#8217;s a big oops on top of the disaster.<\/p>\n<p>See the site 1 second after load:<\/p>\n<figure id=\"attachment_713\" aria-describedby=\"caption-attachment-713\" style=\"width: 535px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-on-load.png\"><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-713\" alt=\"website shows theft message at page load\" src=\"https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-on-load-1024x583.png\" width=\"535\" height=\"304\" srcset=\"https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-on-load-1024x583.png 1024w, https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-on-load-300x170.png 300w, https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-on-load.png 1051w\" sizes=\"auto, (max-width: 535px) 100vw, 535px\" \/><\/a><figcaption id=\"caption-attachment-713\" class=\"wp-caption-text\">The Target website shows theft message at page load<\/figcaption><\/figure>\n<p>And 2 seconds later:<\/p>\n<figure id=\"attachment_714\" aria-describedby=\"caption-attachment-714\" style=\"width: 536px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-after-2-seconds.png\"><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-714\" alt=\"Target homepage after 2 seconds; the warning is covered over\" src=\"https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-after-2-seconds-1024x550.png\" width=\"536\" height=\"287\" srcset=\"https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-after-2-seconds-1024x550.png 1024w, https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-after-2-seconds-300x161.png 300w, https:\/\/paulgurney.com\/whats_new_blog\/wp-content\/uploads\/2014\/01\/target-after-2-seconds.png 1071w\" sizes=\"auto, (max-width: 536px) 100vw, 536px\" \/><\/a><figcaption id=\"caption-attachment-714\" class=\"wp-caption-text\">Target homepage after 2 seconds; the warning is covered over<\/figcaption><\/figure>\n<p>Intentional or by accident?<\/p>\n<p><strong>Does the law require companies to disclose breaches?<br \/>\n<\/strong>As an aside, most States do not require the companies disclose successful network breaches to their customers. A law firm has published a useful chart to track State-by-State requirements.<\/p>\n<p><a title=\"Law firm publishes list of state rules regarding security breaches\" href=\"http:\/\/www.perkinscoie.com\/statebreachchart\/\" target=\"_blank\">http:\/\/www.perkinscoie.com\/statebreachchart\/<\/a><\/p>\n<p>The write:<\/p>\n<blockquote><p>Perkins Coie&#8217;s <a href=\"http:\/\/www.perkinscoie.com\/privacy_security\" target=\"_blank\">Privacy &amp; Security <\/a>practice\u00a0maintains a\u00a0comprehensive chart that summarizes state laws regarding security breach notification.\u00a0 The chart is for informational purposes only and is intended as an aid in understanding each state&#8217;s sometimes unique security breach notification requirements.\u00a0 Lawyers, compliance professionals, and business owners have told us that the chart has been\u00a0helpful when preparing for and responding to data breaches.<\/p><\/blockquote>\n<p>Maine has such a <a title=\"Maine law requiring disclosure\" href=\"http:\/\/www.perkinscoie.com\/sc_maine\/\" target=\"_blank\">disclosure law<\/a> on its book.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Target&#8217;s had a big red target leveled at its data systems recently; the intrusion and theft of over 100 million consumer credit &amp; debit card information is almost the largest in history. It&#8217;s website features a notice to consumers; but strangely, 2 seconds after the home page loads, an ad overlay obscures the warning text &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/paulgurney.com\/whats_new_blog\/2014\/01\/target-website-hiding-its-data-theft-warning\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Target website hiding its data theft warning&#8221;<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[30,22,12],"tags":[],"class_list":["post-707","post","type-post","status-publish","format-standard","hentry","category-ecommerce","category-security","category-website"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p415hC-bp","_links":{"self":[{"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/posts\/707","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/comments?post=707"}],"version-history":[{"count":6,"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/posts\/707\/revisions"}],"predecessor-version":[{"id":716,"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/posts\/707\/revisions\/716"}],"wp:attachment":[{"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/media?parent=707"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/categories?post=707"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/paulgurney.com\/whats_new_blog\/wp-json\/wp\/v2\/tags?post=707"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}