Target data breach (2013)
Hackers stole payment card data from 40 million Target customers during the holiday shopping season. The breach was traced to stolen network credentials from a heating and ventilation contractor that worked with Target.
Target paid $18.5 million to settle probes by 47 states and the District of Columbia in 2017, plus separate class-action settlements.
The breach accelerated the U.S. transition to chip-enabled payment cards and changed retailer data security practices.
Like the Vanilla card case, a mass consumer security failure prompted state-level enforcement and restitution, and the settlement pushed an industry toward better security standards.
