Who pays for data breaches? Banks' lawsuit against Target may clear murky waters


When stores are hit by cyberthieves who is victimized?

Customers, retailers, and banks might all raise their hands to that.

Which leads to another question: who should pay the cost of issuing new credit cards and covering fraudulent purchases?

Not so many volunteers on that one.

The answer will likely come out of a courtroom. Eventually.

Major data breaches at big-name retailers have lost their novelty since Target was hacked a year ago. But courts are only beginning to wade into the murky waters of liability regarding those breaches.

The Hill reports this week's decision allowing banks to proceed with their lawsuit against Target sheds a little more light on the issue.

Reacting to the decision by U.S. District Court Judge Paul Magnuson in St. Paul, one lawyer who specializes in data security tells The Hill: "This ruling is one of the first decisions that clarifies the legal muddle between merchants and banks."

The Minneapolis-based retailer had urged Magnuson to dismiss the banks' lawsuit, arguing it was the hackers who caused the mess and Target has no obligation to the banks. Magnuson disagreed, writing “Although third-party hackers' activity caused harm, Target played a key role in allowing the harm to occur,” The Hill says.

The Star Tribune reports Magnuson dismissed one of the four claims against Target, but allowed the bulk of the case to proceed because he found the banks made a plausible argument that the company failed to provide enough security against the hackers.

For now, Target is being sued by five banks including one Minnesota institution, Village Bank of St. Francis. But as Reuters reports, those five have asked the court to certify their case as a class action lawsuit on behalf of all the banks whose customers used credit or debit cards at Target between Nov. 1 and Dec. 19, 2013.

Target estimates the financial information of 40 million customers was compromised during that time by malicious software hackers installed.

The banks' lawsuit is separate from one consumers have filed, which is also being heard by Judge Magnuson, Reuters says.

Next Up

Cam Talbot

Wild improve to 4-1 with victory over Dubnyk, Sharks

The 4-1 win gives the Wild four victories in five games to start the season.

Screen Shot 2021-01-22 at 9.08.16 PM

Daughter of MN Supreme Court Justice, Allina Health CEO found dead in Iowa

The 21-year-old was found dead in the parking lot of a sorority, according to police.

Screen Shot 2020-09-04 at 8.42.40 PM

Federal charges: MN marijuana lobbyist threatened U.S. representative

"I want you to be as scared as possible," the voicemail allegedly says.

coronavirus, masks, covid-19

Wisconsin Republicans aim to end governor's mask mandate

They've introduced a resolution to remove the governor's emergency powers.

Ted Schweich

Community group hopes to install billboard to get neighbor a kidney

A group called "Team Ted" aims to raise $5,000 to find their friend a kidney donor.

Andrew Palmer

Charges: Coach raped teenage girl on Minnesota basketball team

The 33-year-old head coach has been charged in connection to the alleged crimes.

radio station, microphone

WCCO Radio's program director leaves the company

It's not clear why John Hanson and the station parted ways.

Minneapolis skyline

Minneapolis a step closer to banning facial recognition technology

There are concerns about it leading to a surveillance state, and that it could harm disadvantaged communities.

covid-19, coronavirus, PPE

Here is Minnesota's COVID-19 update for Friday, January 22

Nearly 50,000 Minnesotans have received both doses of the COVID-19 vaccine.