When thieves stole 40 million credit and debit card numbers from Target customers during a massive data breach in 2013, the company eventually agreed to pay $10 million under a proposed settlement in a class-action lawsuit. Experts said that the incident could have been avoided if the company had adopted and implemented better data security measures, and the Department of Justice even looked into the matter.