Dive Summary:

• Sports retailer Genesco is suing Visa to recover penalties incurred after it was the victim of a cyberattack in 2010; Genesco is disputing over $13 million in fines handed out by Visa.
• Officially, the fines stem from payment card industry standards that force retailers to self-regulate and take the necessary precautions to secure data.
• Genesco says that it didn't' breach PCI standards and that it had adhered to standards regarding proper data storage; the company was also fined by Mastercard for the incident, but it was for substantially less.

From the article:

Visa is being accused of "punishing" retailers and merchants who find themselves scrabbling to contain data breaches and repair systems compromized as hacking targets. The lawsuit, filed last week in Tennessee by Genesco and first reported by Wired, means that the sports retailer is one of the first to file such a complaint against a money processing system. The lawsuit is centered on self-regulated PCI security standards, which require networks that cope with financial transactions to take particular steps to secure such data -- and if these are not met, result in stringent penalties. ...