On the downside, they could lose their most profitable business unit.
Check out all the audits they go through. If you're an enterprise customer with this concern you can get access to those audit reports and see if it's one of the things being looked at by an independent third party.
Besides, all Target has to do is encrypt the data. Boom, non-factor.