Target Inc. Is Still a Liability Landmine

There's more fallout to come from the retailer's data breach incident

Mar 19, 2014 at 9:46PM

Three months have passed since the massive data breach at Target (NYSE:TGT) ended, and though the retailer continues to plug away, investors should be cautious treading here, because there's still a massive liability IED waiting to detonate -- and it could blow up anytime now.


As is all too well known now, for several weeks in November and December, hackers had free rein to access, steal, and sell sensitive customer data before being discovered and shut down. Some 40 million people -- and possibly as many as 110 million -- were potentially compromised (I should know -- I was one of them). What is only just coming to light, however, is the extent to which all of this was preventable. And because of that, Target's liability in this financial and public-relations disaster is as yet incalculable.

Stuff happens. Hackers will hack, and every level of defense erected will eventually be overcome. From Target to Wal-Mart and J.C. Penney to BJ's Wholesale Club, all their systems have been hacked at one time or another. Even AT&T had an incident years back, and though it's unpleasant and corporations need to implement industry best practices to protect their customers' data, we almost willfully acknowledge that at some point we may see our information compromised. Call it a hazard of doing business in the modern digital age.

What we don't sign onto, however, is a company cavalierly handling our data, or being more concerned about how its reputation will look instead of rectifying the problem. TJX (NYSE:TJX) was taken to task several years ago, when it suffered a data breach and waited a whole month before notifying customers, costing the retailer more than $100 million in investigation costs, security system upgrades, customer communications, and legal fees, as well as some $1.6 billion over the lifetime of the case.

If reports are true, the extent to which Target's hack attack was preventable means it could be paying an even bigger price tag, with estimates running into the billions of dollars. According to a Bloomberg Businessweek report last month, the retailer had installed a warning system to alert it for just such a breach, and the FireEye (NASDAQ:FEYE) system worked as designed: It signaled the presence of malware and which servers the hackers had infiltrated. Only problem was, Target ignored them. Time after time, FireEye alerted the retailer to what was happening, and again and again it turned a blind eye toward them.

What's more, it wasn't the sophisticated hack job Target and law enforcement officials originally indicated. Rather, Intel's (NASDAQ:INTC) McAfee subsidiary says it was really an unsophisticated "'off-the-shelf' exploit kit" that could be easily caught and protected against. Target admits its software logged the information, but ultimately the retailer "determined ... it did not warrant immediate follow-up." Yeah, not good.

In its annual filing with the SEC, Target admits its liability will be determined by how culpable it's found to be in these attacks and it expects the credit card companies will all be pointing their fingers at the retailer.

While that portion of our network was determined to be compliant by an independent third-party assessor in the fall of 2013, we expect the forensic investigator working on behalf of the payment card networks to claim that we were not in compliance.

Target is worried that the real fallout will be in the hit it takes to its reputation and on whether customers will trust using its REDcards Rewards loyalty program. Anecdotal evidence suggests customers remain wary, and as the program drives meaningful incremental revenues for the retailer, it says it's already witnessed a significant decline in sales after the attack, though it can't determine whether it will be a sustained drop or a long, drawn-out affair. 

Because it's already spent $61 million as a result of the data breach, and with a potential total liability in the billions, Target's foot is poised just above a landmine. Shares in the retailer bounced 10% from the lows it hit on Feb. 1, but this data breach incident is not over yet, and it's a gamble to bet it won't explode on the hope that consumers have short memories.

Retail is in trouble
To learn about two retailers with especially good prospects, take a look at The Motley Fool's special free report: "The Death of Wal-Mart: The Real Cash Kings Changing the Face of Retail." In it, you'll see how these two cash kings are able to consistently outperform and how they're planning to ride the waves of retail's changing tide. You can access it by clicking here.

Rich Duprey owns shares of Intel. The Motley Fool recommends and owns shares of Intel. Try any of our Foolish newsletter services free for 30 days. We Fools don't all hold the same opinions, but we all believe that considering a diverse range of insights makes us better investors. The Motley Fool has a disclosure policy.

Money to your ears - A great FREE investing resource for you

The best way to get your regular dose of market and money insights is our suite of free podcasts ... what we like to think of as “binge-worthy finance.”

Feb 1, 2016 at 5:03PM

Whether we're in the midst of earnings season or riding out the market's lulls, you want to know the best strategies for your money.

And you'll want to go beyond the hype of screaming TV personalities, fear-mongering ads, and "analysis" from people who might have your email address ... but no track record of success.

In short, you want a voice of reason you can count on.

A 2015 Business Insider article titled, "11 websites to bookmark if you want to get rich," rated The Motley Fool as the #1 place online to get smarter about investing.

And one of the easiest, most enjoyable, most valuable ways to get your regular dose of market and money insights is our suite of free podcasts ... what we like to think of as "binge-worthy finance."

Whether you make it part of your daily commute or you save up and listen to a handful of episodes for your 50-mile bike rides or long soaks in a bubble bath (or both!), the podcasts make sense of your money.

And unlike so many who want to make the subjects of personal finance and investing complicated and scary, our podcasts are clear, insightful, and (yes, it's true) fun.

Our free suite of podcasts

Motley Fool Money features a team of our analysts discussing the week's top business and investing stories, interviews, and an inside look at the stocks on our radar. The show is also heard weekly on dozens of radio stations across the country.

The hosts of Motley Fool Answers challenge the conventional wisdom on life's biggest financial issues to reveal what you really need to know to make smart money moves.

David Gardner, co-founder of The Motley Fool, is among the most respected and trusted sources on investing. And he's the host of Rule Breaker Investing, in which he shares his insights into today's most innovative and disruptive companies ... and how to profit from them.

Market Foolery is our daily look at stocks in the news, as well as the top business and investing stories.

And Industry Focus offers a deeper dive into a specific industry and the stories making headlines. Healthcare, technology, energy, consumer goods, and other industries take turns in the spotlight.

They're all informative, entertaining, and eminently listenable. Rule Breaker Investing and Answers are timeless, so it's worth going back to and listening from the very start; the other three are focused more on today's events, so listen to the most recent first.

All are available for free at

If you're looking for a friendly voice ... with great advice on how to make the most of your money ... from a business with a lengthy track record of success ... in clear, compelling language ... I encourage you to give a listen to our free podcasts.

Head to, give them a spin, and you can subscribe there (at iTunes, Stitcher, or our other partners) if you want to receive them regularly.

It's money to your ears.


Compare Brokers