I highly doubt you can sue target. You would need to show that they made it easy for someone to steal your pen number and how much of it was not your own negligence. You will need to provide more facts as to how it was stolen. You say at target, but it may have been part of the larger data breach.