Skip to main content

Who pays for data breaches? Banks' lawsuit against Target may clear murky waters


When stores are hit by cyberthieves who is victimized?

Customers, retailers, and banks might all raise their hands to that.

Which leads to another question: who should pay the cost of issuing new credit cards and covering fraudulent purchases?

Not so many volunteers on that one.

The answer will likely come out of a courtroom. Eventually.

Major data breaches at big-name retailers have lost their novelty since Target was hacked a year ago. But courts are only beginning to wade into the murky waters of liability regarding those breaches.

The Hill reports this week's decision allowing banks to proceed with their lawsuit against Target sheds a little more light on the issue.

Reacting to the decision by U.S. District Court Judge Paul Magnuson in St. Paul, one lawyer who specializes in data security tells The Hill: "This ruling is one of the first decisions that clarifies the legal muddle between merchants and banks."

The Minneapolis-based retailer had urged Magnuson to dismiss the banks' lawsuit, arguing it was the hackers who caused the mess and Target has no obligation to the banks. Magnuson disagreed, writing “Although third-party hackers' activity caused harm, Target played a key role in allowing the harm to occur,” The Hill says.

The Star Tribune reports Magnuson dismissed one of the four claims against Target, but allowed the bulk of the case to proceed because he found the banks made a plausible argument that the company failed to provide enough security against the hackers.

For now, Target is being sued by five banks including one Minnesota institution, Village Bank of St. Francis. But as Reuters reports, those five have asked the court to certify their case as a class action lawsuit on behalf of all the banks whose customers used credit or debit cards at Target between Nov. 1 and Dec. 19, 2013.

Target estimates the financial information of 40 million customers was compromised during that time by malicious software hackers installed.

The banks' lawsuit is separate from one consumers have filed, which is also being heard by Judge Magnuson, Reuters says.

Next Up

Sharon Mollerus - duluth - snow plow car

Sunday snowstorm walloping MN's North Shore with huge totals

Just ridiculous snow totals expected the rest of Sunday.

Screen Shot 2021-12-05 at 6.49.03 AM

Saturday snow causes havoc on Twin Cities roads

There were countless spinouts and crashes across Minnesota.

Kirill Kaprizov

Wild win battle of NHL's hottest teams, extend winning streak to six

Kirill Kaprizov delivered a shootout winner to take down the Maple Leafs.

Eric Kendricks

Vikings downgrade Eric Kendricks to out against Lions

The Vikings have also activated Michael Pierce from injured reserve.

u.s. attorney

Minnesotan sentenced after assaulting man with baseball bat

Marshall Wayne Boshey was sentenced to 30 months in prison followed by two years of supervised release.

Target store

Target's gift card discount is back, but for this weekend only

The fine print: for Target Circle members only (but membership is free).

Screen Shot 2020-06-15 at 7.11.05 AM

Minneapolis teen arrested in St. Cloud after fleeing police in stolen vehicle

The vehicle was stolen in a car-jacking in Minneapolis Thursday.

snow, blowing snow

Winter storm warnings issued with heavy snow set to slam MN

Parts of northern Minnesota could see more than a foot of snow, but there won't be much in the Twin Cities.