- Privacy Risk Report - https://privacyriskreport.com -

Target and Consumer Plaintiffs Nearing Settlement of Class Action Suit Related to 2013 Data Breach

Early news reports [1] indicate that Target will pay $10 million to settle a class action lawsuit with the “Consumer Plaintiffs” related to the 2013 data breach at its stores.

The consumer plaintiffs will be paid settlement proceeds through a dedicated website. The proposed settlement also includes a provision requiring Target to adopt new security measures including appointing a chief information security officer, implementing a written information security program and providing additional security training to its employees.

Consumer plaintiffs will be able to submit claims for their damages which can include the following:

The settlement also requires Target pay the consumer plaintiffs’ attorneys’ fees. Target cannot contest any amount of attorneys’ fees exceeding $6.75 million. The Class Action Plaintiffs’ Memorandum In Support of Motion for Certification of a Settlement Class and Preliminary Approval of Class Action Settlement [2] provides further details of the proposed settlement.

This settlement comes after a U.S. District Court judge rejected Target’s argument that the consumer plaintiffs lacked standing because they could not establish that they suffered an injury from the December 2013 breach of their personal information.

The Memorandum [2] submitted to the District Court is a worthwhile read with a significant amount of valuable information. For example, in a discussion on Page 9 about the class action plaintiffs’ investigation of the breach, the following sources are identified:

Statements Target made on its website and in communications to its customers;

This list, drawing from resources existing both before and after Target’s data breach, provides further evidence the importance of preparing for a breach before it happens.

Tressler will continue to provide updates regarding the litigation involving the consumer plaintiffs as well as that involving the financial institution plaintiffs.
__

This settlement does not include the “Financial Institution Plaintiffs [3]” in the suit. Target sought to dismiss [4] banks claims, but the District Court allowed [5] the banks to proceed. Tressler will continue to follow the proceedings regarding this matter.