The holidays began and ended with the bang of newsworthy cyber breaches that illustrated the complexity of hacking scenarios, which vary in their intent and fallout on targeted companies and their customers, who are viewed as the victims. 

Beginning on Black Friday in December and lasting until Dec. 15, Target experienced a data breach involving 40 million credit, debit, and RedCard records. The retailer announced the leak in a public blog post on Dec. 19. 

"The legal framework for data theft notification is governed by states, which makes handling a multistate breach very challenging," says Matt Donovan, assistant vice president and underwriting leader of technology and privacy at Hiscox. "In Target's instance, they posted a public disclosure on their website to direct customers to call their banking providers, but they didn't directly issue mailed letters to customers notifying them of exposed information, as a breached healthcare provider would do." 

Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.

  • Critical CUTimes.com information including comprehensive product and service provider listings via the Marketplace Directory, CU Careers, resources from industry leaders, webcasts, and breaking news, analysis and more with our informative Newsletters.
  • Exclusive discounts on ALM and CU Times events.
  • Access to other award-winning ALM websites including Law.com and GlobeSt.com.
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.