Skip to main content

Who pays for data breaches? Banks' lawsuit against Target may clear murky waters

  • Author:
  • Updated:

When stores are hit by cyberthieves who is victimized?

Customers, retailers, and banks might all raise their hands to that.

Which leads to another question: who should pay the cost of issuing new credit cards and covering fraudulent purchases?

Not so many volunteers on that one.

The answer will likely come out of a courtroom. Eventually.

Major data breaches at big-name retailers have lost their novelty since Target was hacked a year ago. But courts are only beginning to wade into the murky waters of liability regarding those breaches.

The Hill reports this week's decision allowing banks to proceed with their lawsuit against Target sheds a little more light on the issue.

Reacting to the decision by U.S. District Court Judge Paul Magnuson in St. Paul, one lawyer who specializes in data security tells The Hill: "This ruling is one of the first decisions that clarifies the legal muddle between merchants and banks."

The Minneapolis-based retailer had urged Magnuson to dismiss the banks' lawsuit, arguing it was the hackers who caused the mess and Target has no obligation to the banks. Magnuson disagreed, writing “Although third-party hackers' activity caused harm, Target played a key role in allowing the harm to occur,” The Hill says.

The Star Tribune reports Magnuson dismissed one of the four claims against Target, but allowed the bulk of the case to proceed because he found the banks made a plausible argument that the company failed to provide enough security against the hackers.

For now, Target is being sued by five banks including one Minnesota institution, Village Bank of St. Francis. But as Reuters reports, those five have asked the court to certify their case as a class action lawsuit on behalf of all the banks whose customers used credit or debit cards at Target between Nov. 1 and Dec. 19, 2013.

Target estimates the financial information of 40 million customers was compromised during that time by malicious software hackers installed.

The banks' lawsuit is separate from one consumers have filed, which is also being heard by Judge Magnuson, Reuters says.

Next Up

Melvin Carter

What's in Mayor Melvin Carter's budget proposal?

Here's what the St. Paul mayor is putting his focus on for the upcoming year.

WCCO building

Digital, streaming employees at WCCO-TV vote to unionize

The 15 employees will join on-air talent and producers as members of the SAG-AFTRA union.


Police arrest man suspected of sexual assault, weapons threat in Eagan

The investigation prompted a SWAT response in an Eagan neighborhood on Tuesday.


Minnesota's COVID-19 update for the week ending Tuesday, August 16

The latest reporting period averaged just under 1,300 new cases per day.


Jason and Carly Zucker sell Edina home for $4.18M

The property was bought in 2020, months after Jason Zucker was traded to the Pittsburgh Penguins.

Legacy Lot Random (1 of 6)

Gallery: Luxury living is par for the course here

Cragun’s Golf Resort Communities Offer Stunning Views Along with Resort-Style Living

Screen Shot 2022-08-18 at 8.10.56 AM

Restrictions in place as Emerald Ash Borer found in Sherburne County

The county is now the 36th in the state with a confirmed presence of the invasive insect.

Fire, firefighters

Home that was scene of June standoff engulfed in fire

Authorities arrived to find the home fully ablaze.

Rosland park bridge

Crosstown Hwy. 62 reopens as footage emerges of truck hitting bridge

The westbound lanes were closed in Edina from Tuesday afternoon to Wednesday night.

Screen Shot 2022-08-17 at 8.31.42 PM

Flash flooding as torrential rain hammers Cambridge

Flooding and damage from a non-severe storm Wednesday evening.