Commercial breach research Q&A

Research a significant commercial breach where the company was subject to the PCI-DSS standard.  Note the company name in your thread title.  

Provide the basic facts of the incident.  

Include any assessment of the company's PCI compliance at the time of the incident.

Explore and analyze the role of the industry standard.  

Does it relieve the company of any liability? Should it? 

Does the PCI standards group share any responsibility for a breach?  Should it?  What value does the industry standard provide?