Target Agrees to Settle Additional Data Breach Claims for Almost $39.4 Million | Practical Law

Target Agrees to Settle Additional Data Breach Claims for Almost $39.4 Million | Practical Law

In In re Target Corporation Customer Data Security Breach Litigation, Target Corp. agreed to pay nearly $39.4 million to settle claims alleging violations of the Minnesota Plastic Card Security Act (Minn. Stat. § 325E.64), and common law negligence and negligence per se, with banks and credit unions that issued MasterCard payment cards affected by the data breach Target experienced in the fourth quarter of 2013.

Target Agrees to Settle Additional Data Breach Claims for Almost $39.4 Million

Practical Law Legal Update w-001-0217 (Approx. 3 pages)

Target Agrees to Settle Additional Data Breach Claims for Almost $39.4 Million

by Practical Law Intellectual Property & Technology
Published on 03 Dec 2015USA (National/Federal)
In In re Target Corporation Customer Data Security Breach Litigation, Target Corp. agreed to pay nearly $39.4 million to settle claims alleging violations of the Minnesota Plastic Card Security Act (Minn. Stat. § 325E.64), and common law negligence and negligence per se, with banks and credit unions that issued MasterCard payment cards affected by the data breach Target experienced in the fourth quarter of 2013.
On December 1, 2015, in In re Target Corporation Customer Data Security Breach Litigation, Target Corp. agreed to a proposed settlement of almost $39.4 million to resolve pending class action claims alleging violations of the Minnesota Plastic Card Security Act (Minn. Stat. § 325E.64), and common law negligence and negligence per se, with banks and credit unions that issued payment cards affected by the data breach Target experienced in the fourth quarter of 2013 (No. 14-2522 (D. Minn Dec. 2, 2015)).
In December 2013, Target confirmed it was aware of unauthorized access to payment card data that impacted approximately 40 million customers making credit and debit purchases in its US stores between late November and mid-December 2013. This data breach likely resulted in the theft of personal information, such as the email addresses and telephone numbers of consumers.
The agreement creates a $20.25 million settlement escrow fund where eligible banks and credit unions can claim for either:
  • At least $1.50 per each payment card compromised, in addition to any amount received by Visa or Mastercard’s recovery program (fixed premium claims).
  • Up to 60 percent of total fraud, reissuance, and other costs related to the breach, less any amount received through recovery programs, for those who provide documentary proof of loss (documentary support claims).
The $20.25 million will be paid directly into an escrow account from which fixed premium claim payments will be made first, and documentary support claims will be paid from the remainder.
The agreement also requires Target to forego any further challenges to the $19.1 million MasterCard ADC assessment, from which additional claims will be paid.
Target will also have the right to terminate the settlement if the issuers of more than 525,000 eligible payment accounts submit valid opt-out requests.