The 28,000-member, $211 million Alabama State Employees Credit Union alleges retailer Targetwas not compliant with card industry data security standards duringa major incursion in November and December that led to the theft ofdata from millions of credit and debit cards. ASECU made the claimin court as the first financial institution to file suit to recoupits losses from the card data breach.

“Among other things, merchants are prohibited from storingunprotected cardholder information,” the credit union observed inits class-action complaint. “The stolen data includes among otherthings, customer names, credit and debit card numbers, cardexpiration dates and the three-digit security codes located on thebacks of cards. There is no legitimate reason for Target to keepall of this information stored electronically.”

Target acknowledged on Dec, 19 all of its stores had been hit inthe breach and that data from roughly 40 million credit and debitcard accounts had been compromised.