The 2013 Target Data Breach — A Landmark Case
During the 2013 holiday shopping season (November 27 to December 15, 2013), hackers who had infiltrated Target's network through a third-party HVAC vendor accessed the point-of-sale systems and stole the credit and debit card data of approximately 40 million shoppers. An additional 70 million customers had their names, mailing addresses, phone numbers, and email addresses exposed. The breach became one of the defining data security incidents in American history and triggered a wave of new data breach legislation and corporate security investment. Target reached an $18.5 million settlement with 47 state attorneys general and a separate $10 million class action settlement with directly affected consumers. While the main filing window has closed, Target has faced follow-on litigation as the long-term consequences of the breach continue to emerge.