Schnucks Markets' data breach liability capped at $500,000

Damages from a data breach at Schnucks Markets, St. Louis, have been capped at $500,000 by a federal court. The regional supermarket chain suffered the data breach between December 2012 and March 2013. The retailer had sued First Data Merchant Data Services Corp., Atlanta, and Citicorp Payment Services, Jacksonville, Fla. According to the agreement between Schnucks and First Data,  Schnucks must indemnify the defendants for "all losses, liabilities, damages and expenses" under certain circumstances, "but limits Schnucks' liability to $500,000." Story