follow-up: Heartland breach expenses pegged at $140M -- so far

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.computerworld.com/s/article/9176507/Heartland_breach_expenses_pegged_at_140M_so_far

By Jaikumar Vijayan
Computerworld
May 10, 2010

The costs to Heartland Payment Systems Inc. from the massive data breach 
that it disclosed in January 2009 appear to be steadily adding up.

Quarterly financial results released by Heartland last week show that the 
card payment processor has accrued $139.4 million in breach-related 
expenses. The figure includes a settlement totaling nearly $60 million 
with Visa, another of about $3.5 million with American Express and more 
than $26 million in legal fees.

That total also includes $42.8 million that Heartland has set aside to 
fund proposed settlements with several other litigants over the breach. 
One example of what the fund is set up for is Heartland's offer to settle 
several consumer class action lawsuits against it for $4 million.

So far, Heartland has recovered about $30 million from insurance 
companies. Even with the updated figures, Heartland so far has spent 
considerably less than the staggering $250 million that TJX Companies Inc. 
estimated it would eventually spend to address its massive 2006 data 
breach.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php