ABSTRACT
O n January 10, 2014, Target announced that hackers had stolen financial information for up to seventy million customers.1 Later, it came to light that, as early as November 2013, a secu-
rity worker in India had noticed the security breach and notified the Minneapolis operations center. That alert was overlooked. How much trouble could have been avoided if a course correction had taken place the moment the problem was noticed?
