(Target had previously admitted, although not at first, that the hack also collected PINs (passwords) which would allow direct access to your bank account, for example through a cloned debit card used at an ATM. But Target has insisted that the PIN numbers/passwords, at least, were encrypted and cannot be hacked.