Target in US$18.5mil multi-state settlement over data breach

FILE PHOTO: A newly constructed Target store is shown in San Diego, California May 17, 2016. REUTERS/Mike Blake/File Photo

Target Corp on May 23 agreed to pay US$18.5mil (RM79.51mil) to settle claims by 47 states and the District of Columbia and resolve a multi-state investigation into the retailer's massive data breach in late 2013. 

The investigation – led by the Attorneys General of Connecticut and Illinois – found that cyber attackers had accessed Target's gateway server through credentials stolen from a third-party vendor, New York Attorney General Eric Schneiderman said in a statement on May 23.