TJ Maxx and Marshalls customer data stolen

[Kristijntje]

TJX, which operates the T.J. Maxx and Marshalls chains, said the computer systems that process its customer transactions have been breached and customer information has been stolen.

The off-price retailer said Wednesday that it discovered the intrusion in mid-December, but it does not yet know the full extent of the theft or the number of customers affected.

"The company is committed to providing its customers with more information when it becomes available," Framingham, Mass.-based TJX said in a prepared statement...

full article: http://news.com.com/T.J.+Maxx+parent+say...g=nefd.top

[DecorativeDishes]

I doubt this is a "new" problem. 9 mos ago my TJMaxx card was abruptly turned off and replaced by VISA due to a "mass compromise"...  Kim

[BellisimaJ.]

[quote author=DecorativeDishes link=topic=6740.msg40680#msg40680 date=1169160664]
I doubt this is a "new" problem. 9 mos ago my TJMaxx card was abruptly turned off and replaced by VISA due to a "mass compromise"...  Kim
[/quote]

Wow---that's so outrageous, Kim! :blinkie:

[mandy]

TJX, operators of Marshall's and T.J. Maxx discount retail stores, said Wednesday that a security breach into its computer systems was more extensive than previously reported. TJX had thought the intrusion into its customer data files took place between May 2006 and January 2007, but has since learned its computer system also was hacked into in July 2005 and other periods during that year...

Also believed stolen are some drivers' license numbers together with related names and addresses associated with unreceipted merchandise returns at TJX's T.J. Maxx, Marshalls and Home Goods stores in the U.S. and Puerto Rico for the last four months of May 2003, as well as for May and June 2004...

full article: http://www.ecommercetimes.com/story/J79P...ught.xhtml

[DecorativeDishes]

I just got a 10% off everything from TJ's, Homegoods, and Marshalls coupon that's good for 2 months and notice that they are changing their rewards program to a new bank card company...

There old one was administered by Capital One. Kim

[mandy]

More on the TJ Maxx data breach:

Law enforcement officials in Florida have arrested six individuals suspected of carrying out a fraud scheme built around the misuse of credit card data stolen from retailer TJX Cos.

In partnership with the Gainesville Police Department, officials from the Florida Department of Law Enforcement said they have taken six of 10 suspects into custody for allegedly using the TJX customer data to purchase large quantities of gift cards from discount chains Wal-Mart and Sam's Club.

The series of arrests marks the first specific instance of crime to be connected to the TJX data heist, although some banks previously reported that consumer accounts affected by the incident had been used in attempted fraud around the globe...

full article: http://www.computerworld.com/action/arti...ticleBasic&articleId=9013942

[mandy]

The latest:

TJX Co., the parent company of T.J. Maxx and other retailers, on Wednesday dropped a bombshell in its ongoing investigation of a customer data breach by announcing in an Securities and Exchange Commission filing that more than 45 million credit and debit card numbers have been stolen from its IT systems. Information contained in the filing reveals a company that had taken some measures over the past few years to protect customer data through obfuscation and encryption. But TJX didn't apply these policies uniformly across its IT systems and as a result still has no idea of the extent of the damage caused by the data breach.

As a result, TJX is a company under siege. The company recorded a fourth-quarter charge of about $5 million to cover the costs of containing and investigating the breach, as well as improving the security of its IT systems, communicating with customers, and paying legal fee. The U.S. Federal Trade Commission has launched an investigation of TJX. While the FTC wouldn't reveal the nature of the investigation or when it began, it's likely the result of the data breach. And lawsuits have begun to fly, including one by the Arkansas Carpenters Pension Fund, which owns 4,500 shares of TJX stock...

full article: http://www.informationweek.com/news/show...=198701100

[thentavius]

Good thing I never shop there.

[mandy]

latest update:

Several New England bank groups will sue TJX over a data theft that compromised at least 45.7 million of its shoppers' credit and debit cards. Additionally, the Massachusetts Bankers Association plans to contact other state bank groups nationwide to see if they're interested in joining the lawsuit, which seeks class-action status...

Spitzer said the banks will try to recover "tens of millions of dollars," although the damages the banks ultimately will seek depends on future expenses from replacing cards and covering fraudulent purchases...

full article: http://www.ecommercetimes.com/story/9KOY...heft.xhtml

[mandy]

The latest development:

The price tag on the largest database breach on record moved higher Friday with TJX agreeing to pay nearly US$41 million to settle with credit card companies and banks that were forced to issue new cards to customers of the retailer to prevent or recover fraudulent charges.

TJX will pay $40.9 million through Visa and Visa USA to cover the costs associated with issuing new cards and other means of ensuring that Visa cardholders whose accounts may have been compromised in the breach did not become victims of fraud and identity theft.

The money will actually go to banks and other institutions that issue Visa cards, with the settlement only taking effect if 80 percent of those banks accept the offer by Dec. 19. TJX is also settling with its credit card processor, Fifth Third Bank, with the agreement, according to reports...

full article: http://ecommercetimes.com/story/TJX-to-S...60554.html