XML 25 R14.htm IDEA: XBRL DOCUMENT v3.7.0.1
Commitments and Contingencies
6 Months Ended
Jul. 29, 2017
Commitments and Contingencies Disclosure [Abstract]  
Commitments and Contingencies
Commitments and Contingencies
Payment Card Incident
Description of Event
On September 15, 2016, the Company received information from law enforcement regarding a potential data security issue related to its retail store network. Findings from the investigation show unauthorized access to the Company's payment processing system and the installation of a program that looked for payment card data. The program was specifically designed to find track data in the magnetic stripe of a payment card that may contain the card number, cardholder name, expiration date, and internal verification code as the data was being routed through the affected payment system. There is no indication that other customer information was at risk. Payment cards used at Vera Bradley store locations between July 25, 2016 and September 23, 2016 may have been affected. Not all cards used in stores during this time frame were affected. Cards used on verabradley.com were not affected.
The Company has resolved this incident and continues to work with the computer security firm to further strengthen the security of its systems to help prevent this from happening in the future. The Company continues to support law enforcement’s investigation and also promptly notified the payment card networks so that the banks that issue payment cards could initiate heightened monitoring on the affected cards.
Expenses Incurred
During the thirteen and twenty-six weeks ended July 29, 2017, the Company recorded an immaterial amount of expense relating to remediation activities as a result of the Payment Card Incident.
Future Costs
Payment card companies and associations may require the Company to reimburse them for unauthorized card charges and costs to replace cards and may also impose fines or penalties in connection with the Payment Card Incident, and enforcement authorities may also impose fines or other remedies against the Company. At this time, the Company cannot reasonably estimate the potential loss or range of loss related to fines or penalties that may be assessed, if any. The Payment Card Incident, including customer response and any possible third party claims or assessments from payment card companies, could materially adversely affect the Company's financial condition and operating results. The Company expects its insurance coverage will offset most of the expenses for the investigation and other non-remediation legal and professional services associated with the incident, possible third party claims, as well as fines, penalties, or other expenses, if any, imposed by payment card companies, as discussed above.
Insurance Coverage
The Company maintains $15.0 million of cyber security insurance coverage above a $0.1 million deductible.
Other Commitments and Contingencies
The Company is also subject to various claims and contingencies arising in the normal course of business, including those relating to product liability, legal claims, employee benefits, environmental, and other matters. Management believes that at this time it is not probable that any of these claims will have a material adverse effect on the Company’s financial condition, results of operations, or cash flows. However, the outcomes of legal proceedings and claims brought against the Company are subject to uncertainty and future developments could cause these actions or claims, individually or in aggregate, to have a material adverse effect on the Company’s financial condition, results of operations or cash flows of a particular reporting period.