Target had already told reporters that the source of its huge data breach was a third party contractor. Now sources tell security expert Brian Krebs that hackers gained access to Target’s data using credentials stolen from Fazio Mechanical Services, a heating and air conditioning company. [Source: Krebs on Security]