Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Commercial building cybercrime became a mainstream construction and real-estate concern as buildings gained more network-connected systems. David Barista’s 2016 Building Design + Construction article used the November 15, 2013 Target breach to show why a breach in a retail company could matter to the U.S. commercial real-estate world. Its warning is useful as history, but the available excerpt does not identify a building-automation attack, a particular vulnerability, or a tested mitigation plan. The practical takeaway is to treat connectivity as a project-wide risk question—without attributing technical claims to an article whose full text is unavailable.
What exactly did the 2016 article say?
The verified record identifies the piece as David Barista’s article, “As commercial buildings get ‘smarter,’ concerns rise over cybercrime,” published by Building Design + Construction on May 31, 2016. The publisher’s author page confirms the byline and publication context, while the Muck Rack listing supplies the short excerpt available for review.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →The excerpt opens with the Target data breach of November 15, 2013. It describes stolen payment-card records and personal information and says the incident affected nearly 110 million Target customers worldwide. The listing reproduces Barista’s line: “November 15, 2013, was the day that put cybercrime on the map in the U.S. commercial real estate world.” That sentence is the article’s framing, not a quotation from a security researcher or a technical finding.
Just as important is what the available evidence does not establish. The excerpt does not tell us which heating, ventilation and air-conditioning controls, lighting systems, access-control devices, elevators, tenant networks or other building technologies Barista discussed. It does not identify an attack path into a building, name a compromised contractor or vendor, or list controls that the article recommended. The full article body was not available in the supplied sources, so those details should not be inferred.
Popular on Amazon
- Ergonomically Designed: Work in tight areas with a compact design that gets into tough spots
- Both tools are designed to fit into difficult to reach spaces
- Complete a wide range of applications with a high-performance motor that delivers up to 300 UWO, and an impact driver delivering up to 1,400 in-lbs of torque
- Both the DEWALT impact driver and drill driver feature integrated LED work lights with a convenient 20-second delay, ensuring enhanced visibility in dimly lit or challenging work areas
- One-Handed Loading - Keep one hand free with a 1/4 in. hex chuck that accepts 1 in. bit tips
Why was a retail data breach relevant to commercial real estate?
The connection is about dependence on connected places, not proof that Target’s building systems were attacked. A major retailer operates in physical locations that rely on communications networks, payment systems, suppliers, employees and customers. When a company’s digital systems are compromised, the consequences can reach stores, landlords, tenants and service providers even if the initial intrusion is not an attack on a building-control network.
For a construction and property audience in 2016, the example illustrated a change in risk perception. “Smart” buildings were increasingly described in terms of remote access, centralized management, sensor data and integration with enterprise systems. Each connection could create a new dependency that had to be understood by more than the information-technology department. Owners, developers, architects, engineers, contractors, commissioning agents, facilities teams and tenants all had reasons to ask who could connect, what data moved, and what would happen if a service became unavailable.
That is a conceptual lesson, not a claim that every connected device is dangerous or that a building automatically becomes an attack target. It means that a cyber incident can become a property, safety, business-continuity or contractual problem when digital services support physical operations.
Does the Target example prove that a building was hacked?
No. The supplied excerpt describes payment-card and personal-information theft and uses the breach as an example for the commercial real-estate conversation. It does not say that attackers entered Target through a building-management system, altered temperature controls, opened doors or disrupted a facility.
That distinction matters because cyber incidents are often retold as shorthand. A retail breach can demonstrate the scale and business impact of cybercrime without demonstrating a specific operational-technology technique. Treat the Target reference as an analogy that prompted industry concern, not as evidence of an attack on building automation.
The “nearly 110 million” figure also needs careful wording. It is the number reported in the available article listing; the excerpt does not identify the original source or explain the counting method. If you cite it, attribute it to Barista’s 2016 article excerpt rather than presenting it as a current, independently verified statistic.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Also popular on Amazon
- Valued Carpenter Pencil Set: You will get 2 pcs solid carpenter pencils with 26 piece 2.8 mm refills, 1 replaceable sharpener, 1 plastic storage box.The complete carpenter pencils combination allows you to finish your work faster and more easily
- Deep Hole Marker Pencil: The deep-hole construction pencils adopts 45mm elongated tip design, which is more convenient to mark in the small hole or in other tight areas that other carpenter markers cannot reach
- Carpenter Pencils with Sharpener: The sharpener is screwed into the top of the work pencil, which won't get lost either. Built-in pencil sharpener that keep the lead with pointed and smooth to Improves line of sight in fine work
- Stronger Solid Lead: This work pencil is matched with a 2.8 mm thick lead , which is much thicker and stronger during the drawing process of construction work, it will not break or damage easily
- Marks on Various Surfaces: 3 colors solid construction pencil can marks on various surfaces,such as metal, plastic, wood, paper etc. Ideals for woodworkers, contractors, craftsmen, builders, merchants and masons
What does “smarter” mean in a commercial building?
In the article’s 2016 context, “smarter” is a broad description rather than a named specification. It can refer to buildings in which equipment, sensors, software and occupants’ services exchange information or can be managed remotely. The term should not be read as proof that a particular project used a specific protocol, cloud service or control architecture.
For project discussions, replace the label with an inventory of actual connections. Ask which systems send data outside the building, which systems accept commands from outside, which accounts can reach them, and which parties retain access after construction. A system that only reports energy data presents a different operational question from one that can issue commands, but both need to be documented so that responsibilities are clear.
Construction teams can also separate three ideas that are often blended together:
- Connectivity: whether a device or system communicates with another network or service.
- Control: whether a connection can change a physical setting or authorize an action.
- Dependence: whether a business or safety function relies on that connection being available.
This vocabulary helps an owner and contractor discuss exposure without claiming that the 2016 article identified a particular weakness.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsWho needs to be involved in a connected-building risk discussion?
A cyber question cannot be assigned solely to the IT department when a project includes systems that operate the physical environment. The owner or developer sets business and continuity requirements; the architect and engineers define system interfaces; contractors and controls integrators configure equipment; facilities staff operate it; tenants may connect their own networks; and vendors may provide remote support.
At procurement, ask each bidder to identify every external connection, remote-support account, hosted service and handoff. Require a clear description of who is responsible for account creation, software updates, logging and emergency access. The purpose is not to impose an unverified technical standard, but to prevent a common blind spot in which each party assumes someone else owns the connection.
Also popular on Amazon
- 【Great Compatibility】This Katerk 1/4 inch hex shank bit holder is specifically designed for 1/4 inch hex shank drill bits. It's compatible with most 1/4 fast hex handles, hex sockets, various electric screwdrivers, and handheld screwdrivers. The bit holder makes it a valuable addition for any handyman.
- 【Secure and Safe】Built with a secure backup nut design, each drill bit holder securely locks onto your bits, ensuring they stay firmly in place. Additionally, our bit holder incorporates a high-quality steel ball rolling design that holds up to several kilograms of weight, ensuring your various drill bits don't fall off.
- 【Easy One-Handed Operation】The bit holder for impact driver allows you to change bits single-handedly, simplifying your workflow. Its multi-color design further allows for quick identification of the drill bit you need.
- 【Compact and Convenient】Thanks to its compact size, this 1/4 inch bit holder is easy to carry around. The bit holder allows for easy attachment to various tools, making this a convenient addition to your construction accessories. The Katerk bit holder is cast from high-quality alloy material, promising a long product lifespan. Despite its rugged strength, the bit holder remains lightweight, making it portable.
- 【Cool Christmas Gift For Men Stocking Stuffers】 This screwdriver bit holder, driver bit holder, impact bit holder, can be given as a gift to your loved one, especially for anyone involved in construction or electrical work. It's a must-have for stocking stuffers for men and women, tools gifts for dad, tech gadgets for men, gifts for dad, gifts for him, gifts for husband, gifts for boyfriend, cool gadgets for men, and cool gifts for dad.
During commissioning, include a documented review of the final network and access arrangement, including changes made in the field. At handover, deliver the current asset list, credentials process, support contacts and approved remote-access method to the facilities team. If a tenant or service provider changes the arrangement later, record that change in the same project documentation.
What questions should an owner ask before approving a “smart” building feature?
The following questions turn the article’s warning into a practical project conversation. They are prompts for scoping and accountability, not claims that Barista’s article prescribed a particular control.
Recommended Free Tools
- What is connected? List controllers, gateways, sensors, servers, mobile applications and cloud services, including equipment supplied by subcontractors.
- What can each connection do? Distinguish monitoring from commands, administrative changes and physical access.
- Who can reach it? Name internal users, contractors, manufacturers, managed-service providers and tenant administrators.
- How is access removed? Define what happens when an employee, subcontractor or service contract ends.
- What is the fallback? Document how essential building functions operate if a network, cloud service or remote-support channel is unavailable.
- What records are delivered? Require current diagrams, device lists, software versions, support contacts and change history at handover.
- How will an incident be escalated? Establish who receives an alert, who can authorize isolation, and how occupants, tenants and emergency partners are informed.
These questions also expose commercial assumptions. A low initial price can depend on a vendor’s continuing remote access or a subscription service; removing that access later may require redesign. Conversely, refusing every connection can eliminate useful monitoring or energy-management functions. The decision should be explicit rather than accidental.
How should contractors address cyber concerns during design and construction?
Start with the design documents, not with a last-minute checklist. Show the logical relationships between building systems and corporate or tenant networks, identify interfaces that are still provisional, and assign an owner for each open decision. A drawing that labels a system “connected” without showing the destination or responsible party is not enough for a useful handover.
Construction changes deserve the same attention as design changes. A temporary remote-access arrangement used for commissioning may remain active after occupancy unless someone closes it. A substituted controller may use a different management service. A new landlord requirement may add a connection after the controls package was approved. Record these changes, obtain the owner’s acceptance, and update the final documentation.
Commissioning should verify operational behavior and administrative ownership together. For example, the team can confirm who receives alarms, who can approve a remote session, and what staff can do locally if a hosted service is unreachable. This is a way to make responsibilities visible; it is not evidence that the 2016 article tested or validated a particular procedure.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteAlso popular on Amazon
- Toolwiz 17-inch magnetic sweeper maintaining a load capacity of up to 8.8 pounds provides a perfect solution to the problem of clearing small ferrous metal objects, such as nails, tacks, bolts, and metal shavings from workshops or garage floors.
- Convenient and portable：17” is good for home, small workshop, or small yard as it is space-saving and more reachable for narrow areas. Perfect for collecting nails or small parts in the car, under the table, and in other nooks or crannies.
- Upgraded Handle Design: The handle features a sturdy, non-telescopic design to completely prevent slipping during use. By simply adding or removing the extension poles, the height can be adjusted to 3 different lengths: 18.9" (48 cm), 32.5" (82.5 cm), and 42.5" (108 cm) from ground to top. This customizable height helps prevent back bending and muscle strain, making your cleaning tasks effortless
- Flexible wheels: Upgrade wheel screws to avoid being too tight to spin or too loose. More comfortable 3-inch rubber wheels roll smoothly on carpet, grass, concrete, and hardwood floors. Just push and pull this rolling magnet-sweeper to pick up metal nails easily.
- Lightweight materials: The magnetic nail sweeper's compact and lightweight design makes the sweeping can be done anywhere you want, Push or pull it under the furniture, passing through the workshop floor, driveway, mud, grass, and gravel.
What should facilities teams do after occupancy?
Handover is the beginning of operational accountability. Facilities managers can maintain a living inventory of connected assets, service accounts and support arrangements, then review it whenever equipment or personnel changes. Keep an approved contact path for vendors and contractors so that an urgent request for access can be verified rather than accepted through an informal channel.
Operational records should connect a digital event to a physical consequence. If a service becomes unavailable, staff need to know which functions may be affected, what can be operated locally, and when to involve the owner’s IT or emergency teams. The exact response depends on the building and its contracts; the historical article does not supply a universal procedure.
Leases and service agreements can clarify notification duties, data ownership, remote-support windows, retention of logs and responsibility for restoring service. These clauses matter because a building may contain systems purchased by the owner, a tenant or a specialist provider, each with different support terms.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What are the limits of using a 2016 warning today?
The article is a historical discussion, not a current threat report. Technology, contractual models and regulatory expectations have changed since 2016, and the available sources do not provide contemporary incident statistics, primary-source guidance or named expert recommendations for building operational technology.
Use the article to understand why the subject entered the commercial-real-estate conversation, then obtain current requirements from the authorities, insurers, owners and qualified security professionals who govern the particular project. Do not cite Barista’s article as proof that a modern building faces a measured level of risk, that a named attack method is common, or that one safeguard is sufficient.
When updating a project policy, identify its geography, occupancy, life-safety obligations, tenant arrangements and technology suppliers. A hospital, logistics facility, office tower and retail center may have very different consequences when a connected service fails. The article’s central point—digital incidents can matter to physical property—still supports asking those questions, but it cannot answer them for every building.
Also popular on Amazon
- APPLY TO MOST DRILLS : 6 pieces screw extractors work with any drill and all the screw size or bolt (3-12mm), These extractor tools are used to reverse the damaged screw counterclockwise until it is released
- The DIY Tools for Men-Men won't know they need screw extractor set until they have one! This screw extractor set is GIFTS WRAP AVAILABLE, can be gifted to your loved ones as it reflects a fresh trend with fun and practical. Amazing and Unique tool gifts for men women. The must have stocking stuffers for men, gifts for dad, husband, father, him, guy teens, adult, Boyfriend, son on Birthdays, Christmas, Fathers Day or anniversary. Perfect Holiday Gifts Guide
- HIGH QUALITY - This damaged screw remover tool kit is made from High-Speed Steel H.S.S 4341# , which have high hardness of 63hrc, it's durable and easily to remove any damaged screws.
- EASY TO USE: Just two simple steps to get the job done - drill a hole with a cutting size using the right size screw extractor and easily remove the screw or bolt using the removal tool Hardness 63-65HRC: Titanium hardened steel material, more durable than most screw extractors on the market, better hardness and durability than others, buy with confidence and complete peace of mind
- Cool Gadgets for Men Dad Christmas Birthday Gifts for Men and Women - Men won't know they need screw extractor sets until they have one! Every screw has the potential to rust and break, which can create a situation where it cannot be removed. Owning it, there will be no anxiety about rusty screws. This screw extractor set is GIFTS WRAP AVAILABLE, can be gifted to your loved ones as it reflects a fresh trend with fun and practical. Amazing and unique tool gifts for men women. A must have stocking stuffer for men on birthdays, Christmas, Father's Day or anniversaries, a gifts for dads, husbands, fathers, him, adults, boyfriends, sons. The best and most practical and surprising Christmas gifts
Where can readers verify the source?
The Building Design + Construction author page for David Barista supports the article’s identity and publication context. The Muck Rack article listing contains the excerpt with the Target example, the “nearly 110 million” figure and the quoted sentence about November 15, 2013. Neither supplied source provides the complete article body, so readers should not assume that an unverified summary captures technical details that are not visible in the excerpt.
What is the construction-sector takeaway?
Connected-building features should be evaluated as part of the building’s ownership and operating model, not as isolated equipment choices. Before approving a connection, document what it does, who controls it, how it is supported and what happens when it is unavailable. Carry that information from design through construction, commissioning and occupancy.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Barista’s 2016 article helped frame the Target breach as a moment when cybercrime became impossible for commercial real estate to ignore. Its evidence is narrower than many later retellings suggest: it establishes a historical warning and a retail-breach example, not a catalog of building vulnerabilities. That careful reading produces a more defensible result for today’s projects—specific questions, explicit ownership and no unsupported claims about what the original article contained.
Frequently Asked Questions
Did the Target breach enter through a building-management system?
The supplied excerpt does not say that. It describes stolen payment-card and personal information and uses the event to illustrate why cybercrime mattered to commercial real estate, without identifying a building-automation entry point.
Can I quote the “nearly 110 million” customer figure as a current statistic?
Use it only as a figure reported in the 2016 article excerpt, with that attribution. Because the excerpt does not identify its original source or counting method, it should not be presented as a newly verified or current statistic.
Is Barista’s article a current cybersecurity standard for buildings?
No. It is a historical discussion published in 2016, and the available material contains no current standard, incident dataset or complete mitigation program. A present-day project needs requirements specific to its jurisdiction, occupancy, systems and contracts.
What document should a contractor deliver at smart-building handover?
At minimum, ask for an up-to-date record of connected assets, network interfaces, service providers, support contacts, account ownership and approved remote-access arrangements. The record should include field changes made during commissioning so the facilities team is not relying on obsolete design information.
Why involve tenants in a building cyber-risk review?
Tenants may connect their own networks, applications or service providers to shared infrastructure, changing both access and business-continuity assumptions. Agreeing on notification, responsibility and restoration procedures before an incident reduces ambiguity when ownership is divided.
