Which statement about the 2013 Target data breach is true?

• A. It affected in-store customers, with names, mailing addresses, phone numbers, and email addresses stolen.
• B. It affected online purchases only.
• C. It involved only payment data.
• D. It affected no customer data.

Answer: (A)

This item tests understanding of what data was exposed in Target’s 2013 breach and how broad the impact was. Target reported that while payment card data from in-store purchases was stolen, personal information for up to about 70 million customers—names, mailing addresses, phone numbers, and email addresses—was also exposed. So the statement is true because it accurately describes the in-store impact and the theft of contact information, not just payment data.

The other statements don’t fit because the breach was not limited to online purchases, it involved more than just payment data, and customer data was indeed affected.