Alabama State Employees Credit Union has filed the first class action by a financial services company against Target Corp. over costs from the massive card security data breach.
The suit, filed last week in an Alabama federal court, seeks compensation for financial losses resulting from defrauded deposits of financial institution members and customers, as well as costs associated with closing accounts, reissuing new checks, debit cards and credit cards as a result of Target's data breach.
"Because Target failed to maintain adequate computer data security of customer credit and debit card information, it exposed millions of people to the risk of fraud and identity theft, and violated their privacy rights," says Jere L. Beasley, a shareholder at Beasley Allen Crown Methvin Portis & Miles PC, the Montgomery, Ala.-based law firm that is representing ASECU in the case. "Target could have taken steps to ensure the safety of its information technology systems. Instead, people were left scrambling at the holiday season, unsure of their financial security."
This is the second class action filed against the Minneapolis retail giant over the data breach that began in late November and continued through at least Dec. 15. It is estimated that more than 40 million accounts were compromised.
The firm also filed a class action Dec. 20 on behalf of consumers whose credit and debit card information was compromised at Target stores.
Under Alabama law, $212 million-asset ASECU must initially ask for a minimum of $5 million in damages, but Wilson Daniel Miles 3rd, another attorney at Beasley Allen Crown expects the final figure to be in the "hundreds of millions of dollars" after other financial services firms, including some banks, join the class action.
ASECU's complaint states that as a result of the breach of Target's security, the credit union was required to "expend time, energy and expense to address and resolve these financial disruptions and mitigate the consequences by refunding loss deposits; issuing new credit and debit cards; closing compromised or suspected-to-be compromised accounts; opening new accounts; and increased costs in monitoring customer and member accounts to determine which transactions are legitimate or fraudulent."