Target said Wednesday that investigators have found that hackers stole credentials from a vendor to access the retailer’s systems and pilfer about 40 million debit and credit card numbers as well as personal information for another 70 million people.
Spokeswoman Molly Snyder declined to comment on further details, such as the vendor’s identity, citing the ongoing investigation.
Snyder did say that since Minneapolis-based Target Corp. confirmed the breach on Dec. 15, it has taken extra precautions such as limiting or updating access to some platforms.
Earlier Wednesday, Attorney General Eric Holder said the Justice Department is committed to tracking down the thieves.
In an appearance before the Senate Judiciary Committee, Holder said that the government also will hunt down any people and groups that exploit the stolen data through credit card fraud.
Target says it is working with the Secret Service and the Justice Department in response to the data breach.