Between November 30th and December 2nd, 2013, cybercriminals successfully infected the credit card payment systems and bypassed security controls of…

A Option A: This option explains that the detection software worked as intended and alerted the security team, but the failure occurred due to human error - the security personnel did not act on the alerts. This is a common issue where the technology functions correctly, but the human response is lacking. Option B: This explains a delay in action post-notification from the Department of Justice, but it doesn’t fully account for how the breach was successful initially despite having detection software. Option C: This option shifts the blame to third-party vendors, which may not directly explain the effectiveness of the malware detection. Option D: This points to the malware disguising itself, which could bypass some detection, but the crucial factor was the human oversight in not responding to alerts. Reference: IAPP CIPT Study Guide Case studies on data breaches and human error in cybersecurity responses