Article content continued

The previous duties of chief compliance officer were overseen by Target’s current vice president of assurance risk and compliance, who had previous plans to retire at the end of March. Now, Target is separating the responsibility for assurance risk and compliance.

Target also says it’s working with an outside adviser, Promontory Financial Group, to help it evaluate its technology, structure, processes and talent as part of the overhaul.

“While we are still in the process of an ongoing investigation, we recognize that the information security environment is evolving rapidly,” Steinhafel said in a statement.

Target is still grappling with the fallout of the theft. The company said last week that its profit for the fourth quarter fell 46% on a revenue decline of 5.3% as the breach scared off customers.

While Target said sales have been recovering since it disclosed the breach in mid-December, the company expects business to be muted for some time. It issued a profit outlook for the current quarter and full year that was below Wall Street estimates.

The company is offering free credit monitoring for a year for any customer shopping at a Target store who wants it.

It’s also equipping its locations with more security technology. Target is accelerating its $100 million plan to roll out chip-based credit card technology, which experts say is more secure than using traditional magnetic stripe cards.

When the final tally is in, Target’s breach may eclipse the biggest known data breach at a retailer, one disclosed in 2007 at the parent company of TJ Maxx that affected 90 million records.

In a posting last week on a company blog, Steinhafel said, “In the weeks ahead, we hope to understand more about how this attack happened. And will use what we learn to inform our guests, make Target a safer place to shop and to drive change across the broader retail industry.”

In a letter to Steinhafel furnished by Target, the outgoing Chief Information Officer Jacob said resigning was a “difficult decision,” but she said that “this was a time of significant transformation for the retail industry and for Target.” She did not mention the data breach.