"Leading up to the Data Breach, Heartland publicly touted its 'multiple layers of security to isolate our databases from unauthorized access,' represented that it placed 'significant emphasis on maintaining a high level of security in order to protect the information of our

merchants and their customers,'" the institutions alleged in their complaint. "[Heartland] touted its 'state-of-the-art' security measures and facilities, and claimed to 'limit sharing of non-public personal information to that necessary to complete the transactions on behalf of the consumer and the merchant and [to the extent permitted by law].'"

All the while, Heartland's systems were compromised and any merchants who signed on because of these assurances wound up handing their customers' card data to thieves, they argued.

The credit union plaintiffs in the consolidated suit are Matadors Community Credit Union, in Chatsworth, California; Elevations Credit Union, located in Boulder, Colorado; PBC Credit Union, located in West Palm Beach, Florida; O Bee Credit Union, located in Tumwater, Washington; Seabord Federal Credit Union, located in Bucksport, Maine and Pennsylvania State Employees Credit Union, located in Harrisburg, Pennsylvania.