The recent massive data breach at Target Corp. so far has saddled the retail giant with a $61 million tab—one that could rise in the future, the company said Wednesday.

An insurance payment left Target with only $17 million of net expenses from legal assistance, identity-theft protection and other services the company procured after the personal information of as many as 110 million customers was exposed to hackers during the holiday shopping season last year. But in its fourth-quarter earnings report, the Minneapolis-based retailer braced investors for the potential of more costs to come from the cyberattack.