Target

Target operates withinthe hotel‑entertainment industry, offering lodging and entertainment services to guests across its properties in the United States. The organization relies on point‑of‑sale systems to facilitate transactions for food, beverage, and other amenities within its venues. In addition to hospitality services, Target develops and maintains internal software applications that support its operations. Evidence of this development activity includes an Enterprise Git server that stores proprietary code repositories. The company uses internal system names such as BigRED and unique identifiers to manage its codebase.

Target’s technical environment is distinguished by the use of a VPN‑restricted access model for its Enterprise Git server, requiring either virtual private network connections or on‑site presence for developers. The organization has been the subject of financially motivated cyber activity, notably a 2019 campaign attributed to the FIN8 threat group that employed a ShellTea backdoor aimed at its point‑of‑sale infrastructure. More recently, in September 2025, a source code leak exposed approximately 860 GB of internal repositories, which employees confirmed as authentic through references to real system names. The leak prompted the company to accelerate security changes, including tightening access controls to its Git infrastructure. The source material does not disclose Target’s ownership structure, parent company, or any subsidiary relationships.