Target works on security-heavy credit cards, after breach
Target is still reeling from the massive security breach, which affected as many as 110 million customers. Now, as the retailer gets back on its feet, it's becoming more security focused. — Target Chief Financial Officer John …
Context & Ripple Effects
Target's move toward security-heavy credit cards is the product response to a crisis that has escalated in stages since December: first reports of an investigation into a data breach, then confirmation that 40 million accounts were affected, then disclosure that personal data on another 70 million people was stolen. By early February the figure cited is as many as 110 million customers, with stolen card numbers confirmed transmitted to a server in Russia.
The company's credibility problem is compounded by history: a 2005 hack already exposed large numbers of its customers' card numbers, and the retailer failed to prevent a repeat nine years later. The story drew unusually broad same-day pickup — Wall Street Journal, The Verge, ZDNet and others — and Target faces a congressional hearing on data breaches next month, so the card announcement lands under both public and legislative pressure.
First-order effects
- Target must now sell customers on new security-focused cards while its CFO fields questions about the 110-million-customer breach, with testimony before Congress scheduled for next month adding a hard deadline to any remediation story.
- Card-issuing banks and payment processors tied to the compromised accounts bear the immediate reissuance and fraud-absorption costs of cards whose numbers were transmitted overseas.
Second-order effects
- Other large US retailers, having watched the government warn merchants about the hackers' methods, face pressure to accelerate their own card-security upgrades rather than be the next headline.
- Payment networks gain leverage to push more secure card standards through the retail channel, since a marquee merchant adopting security-heavy cards weakens the cost argument other merchants have used against them.
Third-order effects
- If a retailer of Target's scale commits to hardened payment cards after two breaches in under a decade, the US retail industry moves from treating card security as a compliance line item toward treating it as customer-facing infrastructure — with regulators watching whether voluntary upgrades outpace legislation.
- Breach-response economics begin to shift: the visible cost of repeated incidents makes prevention spending easier for boards to approve than post-breach remediation, reshaping how retail security budgets are justified.
The trend: Major US retailers are being pushed by successive megabreaches to rebuild payment-card security as a brand promise rather than a back-office control.