A security firm has identified a teenager in Russia as the author of the malware in that attack and another against Neiman Marcus. (Source: KATU/INTELCRAWLER.COM/CNN)
(KATU/INTELCRAWLER.COM/CNN) - The massive security breach at Target could be spreading.
A security firm has identified a teenager in Russia as the author of the malware in that attack and another against Neiman Marcus.
First, it was Target.
The "security breach" that compromised the confidential information of millions of Americans.
Then it was Neiman Marcus.
The high end retailer disclosed it too had been hacked, but they haven't disclosed how many people were affected.
And now, a report from the cyber watch group Intelcrawler suggests at least six more retailers have yet to tell customers they've been breached as well with the same malware - attacking their online credit card processing.
"Once it's identified, then the security community can rally around it and put controls in place. But the problem is, the hackers know that," said Ken Stasiak, CEO, SecureState. "And they manipulate or mutate this malware, and then re-use it."
According to Intelcrawler, the source of the malicious software can all be traced back to one place.
A hacker, close to 17 years old, in Russia.
The report claims the very first sample of the malware was created in March of 2013 - hitting stores in Australia, Canada, and the United States.
"Let's say hypothetically, a retailer has 40 million transactions by 40 million different customers," said Paul Callan, CNN Legal Analyst. "All 40 million may have been damaged in some way, and under law they can be joined together in a class action lawsuit."
Legally, the burden is on retailers to protect customer information.
But from what we know now this could be the tip of the iceberg.
Experts say the teen who made the malware that started this whole mess - shared it with other hackers.
"And was able to put it up on the internet for download for other hackers to then take, and potentially use it for malicious harm," Ken Stasiak, CEO, SecureState. "And that's what we believe happened to Target as well as Neiman Marcus."
Copyright 2014 KATU,INTELCRAWLER.COM, via CNN. All rights reserved.