Data Breach

As previously reported, in the fourth quarter of 2013, we experienced a data breach in which an intruder stole certain payment card and other guest information from our network (the Data Breach) which resulted in a number of claims against us, several of which have been finally or preliminarily resolved.

Actions related to the Data Breach that remain pending are: (1) one action previously filed in Canada; (2) several putative class action suits brought on behalf of shareholders; and (3) ongoing investigations by State Attorneys General and the Federal Trade Commission. In connection with item (2), the special litigation committee (the Committee) charged with investigating the shareholder claims recently filed its report and recommendation with the court and has filed a motion to dismiss the claims which is currently pending. As reported in our Form 10-K for the fiscal year ended January 30, 2016, our settlement of the financial institutions class action remained subject to final court approval. That final approval was received in May 2016.

Our accrual for estimated probable losses is based on actual settlements reached to date and the expectation of negotiated settlements in the pending actions. We have not based our accrual on any determination that it is probable we would be found liable for the losses we have accrued were these claims to be litigated. While our estimates may change as new information becomes available, we do not believe any adjustments will be material.

Expenses Incurred and Amounts Accrued



Data Breach Balance Sheet Rollforward (millions)	Liabilities			Insurance Receivable
Balance at January 31, 2015	$	171		$	60
Expenses incurred ^(a)	3			—
Payments made / received	(7		)	(5		)
Balance at May 2, 2015	$	167		$	55



Balance at January 30, 2016	$	80		$	20
Expenses incurred	—			—
Payments made / received	(1		)	(4		)
Balance at April 30, 2016	$	79		$	16

^(a)Amounts relate to legal and other professional services and are included in our Consolidated Statements of Operations as SG&A, but are not part of our segment results.

Since the Data Breach, we have incurred $291 million of cumulative expenses, partially offset by expected insurance recoveries of $90 million, for net cumulative expenses of $201 million.