Target learned the security lesson the hard way, but they definitely learned it. When I was there, security was one of the rare parts of the tech org I found legitimately impressive. (But also: I am not a security guy! Maybe their actual practices were compelling but flawed! But the organization as a whole was legitimately serious about it )
Target learned the security lesson the hard way
About the 2013 Target data breach, https://krebsonsecurity.com/2015/09/inside-target-corp-days-...
Target is a far outlier in the insane shit that they do in terms of retail security. No one else really approaches them in this regard.
Apparently Home Depot has a very good developer culture too.
I worked with the Target security team on a few projects and I definitely agree that they take it seriously