Skip to main content

Who pays for data breaches? Banks' lawsuit against Target may clear murky waters

  • Author:
  • Updated:

When stores are hit by cyberthieves who is victimized?

Customers, retailers, and banks might all raise their hands to that.

Which leads to another question: who should pay the cost of issuing new credit cards and covering fraudulent purchases?

Not so many volunteers on that one.

The answer will likely come out of a courtroom. Eventually.

Major data breaches at big-name retailers have lost their novelty since Target was hacked a year ago. But courts are only beginning to wade into the murky waters of liability regarding those breaches.

The Hill reports this week's decision allowing banks to proceed with their lawsuit against Target sheds a little more light on the issue.

Reacting to the decision by U.S. District Court Judge Paul Magnuson in St. Paul, one lawyer who specializes in data security tells The Hill: "This ruling is one of the first decisions that clarifies the legal muddle between merchants and banks."

The Minneapolis-based retailer had urged Magnuson to dismiss the banks' lawsuit, arguing it was the hackers who caused the mess and Target has no obligation to the banks. Magnuson disagreed, writing “Although third-party hackers' activity caused harm, Target played a key role in allowing the harm to occur,” The Hill says.

The Star Tribune reports Magnuson dismissed one of the four claims against Target, but allowed the bulk of the case to proceed because he found the banks made a plausible argument that the company failed to provide enough security against the hackers.

For now, Target is being sued by five banks including one Minnesota institution, Village Bank of St. Francis. But as Reuters reports, those five have asked the court to certify their case as a class action lawsuit on behalf of all the banks whose customers used credit or debit cards at Target between Nov. 1 and Dec. 19, 2013.

Target estimates the financial information of 40 million customers was compromised during that time by malicious software hackers installed.

The banks' lawsuit is separate from one consumers have filed, which is also being heard by Judge Magnuson, Reuters says.

Next Up

gov tim walz

Walz's $2.7B infrastructure plan includes $940M for climate projects

Projects will help Minnesota prevent or adapt to climate change and mitigate its impacts, the governor says.

south st paul mayor twitter 2

'Just took this': MN mayor tweeting others' pics says it's for 'entertainment'

The mayor told Bring Me The News his goal on Twitter is to spread joy.

covid, vaccine

Minnesota's COVID-19 update for Wednesday, January 19

More than 44,000 new cases reported from the holiday weekend.

rise bagel co

Bagel shop closes amid vax-or-test mandate, posts: 'All are welcome here'

Other Twin Cities restaurants have also temporarily closed this week.

Rick Spielman

Spielman: 'It was constantly like a moving target all the time'

Spielman said drafting and rostering players who fit the scheme was difficult with all of the offensive coordinators Mike Zimmer had.

police lights

Suspect fled police, found hiding in old camper in scrap yard

Police say they were trying to pull him over for driving without any lights.


Omicron fading in Minnesota? Wastewater detection provides hope

Wastewater samples can help predict a rise or fall in COVID-19 cases.

covid vaccine card

COVID: Minneapolis, St. Paul vaccine-or-test rule for dining now in effect

Proof of vaccination or a negative COVID test are required.

freight train railroad tracks

Man crawls to safety before train hits his stuck wheelchair

The incident happened Tuesday on Highway 169.

US Bank Stadium

Sizing up Vikings coaching candidates we know about so far

A closer look at some of the head coaching candidates interviewed by the Vikings

St. Paul police

St. Paul: Man called police to report he killed his wife

Police are also investigating a separate fatal shooting in the Frogtown neighborhood.