Skip to content

Detailed narrative of event

Detailed Narrative of Events

(Extended Documentation for the In re Target Corp. Customer Data Security Breach Litigation (MDL No. 14-2522) Case Study)

Table of contents

  1. Overview
  2. Incident and public disclosure (2013)
  3. Litigation consolidation (MDL 14-2522)
  4. District court pleading-stage ruling (2014)
  5. MDL development and discovery (2015–2016)
  6. Eighth Circuit review (2017)
  7. Subsequent settlements and administration

Overview

Target Corporation publicly disclosed a large-scale incident involving payment card data and customer personal information, generating extensive civil litigation consolidated in the District of Minnesota as MDL No. 14-2522. Consumer and financial-institution plaintiffs pursued relief under multiple theories; courts issued influential opinions on pleading, class certification, and settlement administration.

This narrative emphasizes the logical sequence from security incidentpublic disclosure and litigation filingpretrial rulingsappellate reviewlong-tail resolution—the pattern Capital One’s reference narrative uses for breach-driven legal proceedings, adapted here to a class-action MDL posture.


Incident and public disclosure (2013)

Public judicial descriptions characterize the incident as involving third-party intruders who compromised payment processing environments and obtained payment card data and personal information relating to a very large customer population (opinions reference scales on the order of tens of millions of affected individuals). POS, network, and vendor remote access are recurring themes in retail breach litigation.

Target publicly disclosed the incident and began customer notification and remediation processes, while law enforcement and payment network investigations proceeded on parallel tracks.


Litigation consolidation (MDL No. 14-2522)

Plaintiffs filed numerous actions across the country. The Judicial Panel on Multidistrict Litigation centralized related consumer actions into MDL No. 14-2522 in the District of Minnesota, creating a single forum for pretrial coordination, discovery, and motions practice affecting consumer and financial-institution tracks (among others).


District court pleading-stage ruling (2014)

In December 2014, the district court issued an opinion addressing Rule 12(b)(6) motions in the consumer MDL, analyzing which claims could proceed at the pleading stage under applicable state consumer-protection and related theories. In re Target Corp. Customer Data Sec. Breach Litig., 66 F. Supp. 3d 1154 (D. Minn. Dec. 18, 2014).


MDL development and discovery (2015–2016)

The MDL included multiple litigation tracks, including consumer claims, financial-institution claims, discovery disputes, and settlement efforts. Published opinions capture only subsets of the overall docket; complete procedural history requires PACER/ECF review.


Eighth Circuit review (2017)

In February 2017, the Eighth Circuit issued a published decision reviewing class certification and settlement-related issues, remanding for a more detailed Rule 23 analysis of adequacy-of-representation concerns and addressing appeal bond questions. In re Target Corp. Customer Data Sec. Breach Litig., 847 F.3d 608 (8th Cir. Feb. 1, 2017). In May 2017, the court filed an amended opinion clarifying a footnote about an objector’s appellate scope.


Subsequent settlements and administration

The MDL ultimately moved toward settlement structures and claims administration processes (consult the official docket for class notices, fairness hearings, and distribution details). The Target MDL illustrates how a single breach can generate multi-year litigation with pretrial opinions that become national precedent for pleading and certification in data-breach class actions.

© 2026 Yi Zhang. Licensed under the MIT License.
Last updated: 2026 April 17 9:37 AM