Target credit card data breach spurring lawsuits, investigations

12:40 PM, Dec 23, 2013   |    comments
  • Share
  • Print
  • - A A A +

(USA TODAY) -- Consumer frustration and outrage over the Target credit card breach is moving from Facebook and Twitter to the courts and state governments even as the stolen accounts are flooding the black market.

Three class-action lawsuits have been filed in the wake of the theft of data on about 40 million credit and debit card accounts of shoppers at Target from Nov. 27 to Dec. 15. More than $5 million in damages is being sought in the cases, two of which were filed in California and one in Oregon.

SEE ALSO: Security tips for Target shoppers
MORE: Weak U.S. card security made Target a juicy target

he Attorney General in at least four states -- Connecticut, Massachusetts, New York and South Dakota - have asked Target for information about the breach. That's the first step to a possible multi-state investigation into the breach.

Meanwhile, millions of the card accounts stolen have begun showing up for sale on the black market, says the security reporter who initially broke the news about the breach. "Credit and debit card accounts stolen in (the Target breach) ... have been flooding underground black markets in recent weeks, selling in batches of one million cards and going for anywhere from $20 to more than $100 per card," writes Brian Krebs on his site.

Over the weekend, Target offered customers a 10% discount in its U.S. stores, after CEO Gregg Steinhafel said on Friday that the company would provide free credit monitoring to at-risk customers.

The company may need to do a lot more in coming days. "With these data security breaches, there's usually the question of consumer confidence and trust," says Daren M. Orzechowski, a New York-based intellectual property attorney with White & Case LLP. "They have to balance if they feel they need to do more to try to preserve consumer confidence."

MORE: Fraud fallout -- Chase sets limits on some debit cards

The speed of class-action suits and state officials getting involved "is not surprising," says Orzechowski, who deals in data privacy issues. Many states have strong breach notification laws that requite the attorney general be notified, he said.

Both the state and civilian queries will be interested in "when did Target know there was an issue and how long did they wait, in terms of responding, because there's a lot of obligations on promptly notifying people and there is going to be a lot of focus on that in the days to come."

MORE: Target says PINs are not part of stolen card data

As of yet, there's no idea of how much consumers were harmed, says Columbia Law School professor John Coffee. "We do not yet know if Target was negligent or whether these were very skillful hackers who could have penetrated any system--but those critical factual issues seldom slow the race to the courthouse," he said.

Also investigating the Target breach -- the second-largest in U.S. history being a 2005 case involving retailer TJX -- is the Secret Service. Target is based in Minneapolis and has almost 1,800 stores in the United States and 124 in Canada, according to its website.

Target is directing customers to its website and a toll-free phone number for more information about the breach.

The breach could also lead to smarter, more hacker-resistant smart cards. "We are using 20th century cards against 21st century hackers," says Mallory Duncan, general counsel at the National Retail Federation. In the U.S., most account info is contained on the magnetic strip on the card's back and is easily replicated. In the rest of the world, most cards contain digital chips that create a unique code, not easily copied, every time the card is used.

Check out some of our most read stories from 2013:

#shortyellows: Florida quietly shortened yellow lights

Terrorism Warning: Memo says terrorists practicing dry-runs on Florida flights

Kittens shot: Officer shoots kittens in front of children

Courtroom apology: Woman apologizes for flipping off judge

Weird ice: Strange, giant circles appear on frozen pond

Controversial Club: College student organizes "White Student Union"

CFO Trouble: School administrative chief in trouble over her porn sex blog

Warning Shot Wife: Mother gets 20 years for firing warning shots at abusive husband

Science Arrest: Teen girl arrested over science project explosion

Wait, WHAT?? Dog shoots man in the leg with a handgun

Popular photo galleries:

Faces of Meth: Devastating before and after photos of meth abusers

Travon Martin Shooting: Trayvon Martin crime scene photos and George Zimmerman injury photos 

Hooters Winners: Winners of the 2013 Hooters swimsuit pageant

Rejected: Funny Florida license plates rejected by the DMV ***warning graphic***

Deadly sinkhole: Home collapses, man dies in giant sinkhole

Popular Databases:

Florida Sex Offenders: Look up sex offenders in any Florida neighborhood here

Restaurant Inspections: Look up inspection reports for any Florida restaurant here

Most Watched Videos