(CNN) - A security firm that had pointed the finger at a 17-year-old Russian last week updated its report Monday to identify a different Russian resident as being responsible for writing the malware used in an attack compromised the credit card numbers and other personal information of up to 110 million Target customers.
In a statement published Friday, security firm IntelCrawler said the breach was the result of malware that infected Target's payment system and possibly compromised the systems of other retailers. Neiman Marcus reported a similar security breach this month.
The 17-year old does not appear to be solely responsible for the attack. Independent security researcher Brian Krebs earlier reported that other code in the Target hack pointed to a Ukraine resident.
Experts say the author may have shared it with others.
"Well, we should be worried. One of the things the hackers do is take the malware as it's called. Once it's identified, then the security community can rally around it and put controls in place. But the problem is, the hackers know that. And they manipulate or mutate this malware, and then reuse it," SecureState CEO Ken Stasiak said.
"We believe that he originated the code, or the malware everybody's calling it now. And was able to put it up on the Internet for download for other hackers to then take, and potentially use it for malicious harm. And that's what we believe happened to Target and Neiman Marcus."
The first sample of the malware was created in March and since then, more than 40 versions have been sold around the world, IntelCrawler said. It first infected retailers' systems in Australia, Canada and the United States.
Andrew Komarov, IntelCrawler CEO, said most of the victims are department stores and said more BlackPOS infections as well as new breaches could appear soon. Retailers should be prepared.
"The numbers could be staggering, really, because what the retailers are looking at are potential class action lawsuits," CNN legal analyst Paul Callan said.
"Let's say hypothetically, a retailer has 40 million transactions by 40 million different customers. All 40 million may have been damaged in some way, and under law they can all be joined together in a class action lawsuit."
Thursday, April 17 2014 4:43 PM EDT2014-04-17 20:43:50 GMT
Officials with the VA Medical Center in downtown Charleston say a North Charleston man who was initially federally charged with a $525 fine for an $.89 drink refill will instead be given a warning.More >
Officials with the VA Medical Center in downtown Charleston say a North Charleston man who was initially federally charged with a $525 fine for an $.89 drink refill will instead be given a warning. More >
Thursday, April 17 2014 9:05 PM EDT2014-04-18 01:05:03 GMT
A Mount Tabor reservoir that holds Portland's drinking water has been taken offline out of fear that a group of trespassers urinated in it. Five people were seen at Mount Tabor Park around 1 a.m. Wednesday.More >
A Mount Tabor reservoir that holds Portland's drinking water has been taken offline after a teenager urinated in the reservoir. More >
Saturday, April 12 2014 6:07 AM EDT2014-04-12 10:07:09 GMT
An incredible photo snapped Saturday at the iconic Pipeline on Oahu's North Shore is going viral. A mother humpback whale and her calf were cruising just offshore when a set rolled in. J.T. Gray of NorthMore >
An incredible photo snapped Saturday at the iconic Pipeline on Oahu's North Shore is going viral.More >
Thursday, April 17 2014 9:54 PM EDT2014-04-18 01:54:28 GMT
Officials say at least one person is dead following a wreck at the Interstate 70 turnpike Wednesday afternoon.The crash was reported at eastbound I-70 and Interstate 635 about 12:30 p.m.Refresh this pageMore >
Officials say a woman was killed when she jumped from a moving vehicle on Interstate 70 on Wednesday afternoon.More >
Thursday, April 17 2014 12:04 PM EDT2014-04-17 16:04:29 GMT
Kansas City, MO police were called out to a SUV vs semi accident on Thursday morning. The accident occurred before 8:00 a.m. near NW Cookingham Drive and Valley View Road. Injuries are non-life threatening.More >
Missouri Highway Patrol troopers say two children were injured in a serious crash in the Northland Thursday morning.
Thursday, April 17 2014 11:46 PM EDT2014-04-18 03:46:37 GMT
An ailing Miley Cyrus has canceled her concert Tuesday night at Sprint Center.The notice came a matter of hours before she was scheduled to go on stage.A concert promoter tells KCTV5 that Cyrus is in theMore >
An ailing Miley Cyrus remains in a Kansas City hospital and continues to cancel concerts. This comes after she unexpectedly canceled her KC concert.More >
Thursday, April 17 2014 4:04 PM EDT2014-04-17 20:04:27 GMT
Police continue to place a high priority on the investigation of a pattern of recent roadway shootings around the Kansas City metropolitan area, they said in a release Wednesday.The Missouri State HighwayMore >
Police continue to place a high priority on the investigation of a pattern of recent roadway shootings around the Kansas City metropolitan area, they said in a release Wednesday.More >