People close to the investigation into the data breach suffered by Target have revealed that the attackers stole the credentials used to penetrate the retailer’s systems from Fazio Mechanical Services, a Pennsylvania-based company that provides heating, ventilation, and air conditioning (HVAC) services.