BreachCensus

Target Corporation

RetailUnited States of America

Target Corporation is a retail organisation in California. It appears on the California Attorney General breach-notification register and the Wisconsin DATCP data breach list with 2 confirmed incidents; the most recent notice was filed on December 20, 2013.

Headquarters
Minneapolis, United States
Employees
400,000 (as of 2025)
ISIN
US87612E1064
LEI
8WDDFXB5T1Z6J0XC1L66
Wikidata
Q1046951

Data as of September 12, 2026.

Confirmed incident

Filed in CA and WI

The same incident was filed separately with 2 jurisdictions within a few days of each other (CA and WI) — shown here as one incident.

Occurred
November 27, 2013
Disclosed
December 20, 2013

Timeline

  1. December 19, 2013
    Reported to regulator Regulator

    WI AG breach notification: an unknown number of Wisconsin residents affected

    source
  2. December 20, 2013
    Reported to regulator Regulator

    CA AG breach notification: an unknown number of California residents affected

    source

Litigation

  • Possible litigation — multiple candidate dockets found, not yet resolved to a single case.
What a California notice means

Governed by Cal. Civ. Code §1798.82. A copy of the notification must be sent to the Attorney General when a single breach requires notifying more than 500 California residents.

Note: no affected-count is published on this register.

California breach-notification register ↗

What a Wisconsin notice means

Governed by Wis. Stat. §134.98. No state agency must be notified. Affected individuals must be told within 45 days, and the national credit bureaus too when 1,000 or more people are notified; DATCP lists breaches reported to it or found to affect Wisconsin consumers.

Note: the count is Wisconsin residents only when published, not a total; many notices do not include one.

Wisconsin breach-notification register ↗

Unverified claim

US — Ransomware Attack

This is an unverified claim — it has allegedly happened to this organisation, as posted by a source below, but has not been confirmed by a regulator, a court filing or the organisation’s own disclosure.

Timeline

  1. August 20, 2026
    Claimed by threat actor (unverified) Claim

    Ransomware leak-site claim (ransomware_live)

    source