Target’s big data breach could prove costly