Feeds

TJX security breach fears grow

How deep does the rabbit-hole go?

Protecting against web application threats using SSL

TJX, the US retailing giant,says a hacker intrusion against its credit card transaction processing system is more serious than first reported.

The breach, detected in December 2006, affected systems handling debit and credit card transactions as well as cheque purchases and refunds at the company's TJ Maxx, Marshalls, HomeGoods and A J Wright stores in the US and Puerto Rico; and its Winners and HomeSense stores in Canada.

Last month, TJX said the intrusion took place between May 2006 to January 2007. The firm now reckons attacks date back to July 2005 and involve transactions up to June 2004 - previously, it thought they were confined to 2003. It still maintains names and addresses were not included with the credit and debit card data reckoned to have been compromised. But It's beginning to look more likely that some of the chain's customers in the UK and Ireland, the retailer operates the popular clothing store TK Maxx, may have been put at risk. TJX’s investigators have found evidence of an intrusion to the portion of its computer system that processes T.K. Maxx customer transactions.

TJX now reckons a number of drivers' license numbers together with related names and addresses were also compromised. This data relates to receipted merchandise returns at its T.J. Maxx, Marshalls, and HomeGoods stores in the US and Puerto Rico for the last four months of 2003 and May and June 2004. TJX intends to write to customers in this category, warning that their details might have been exposed.

TJX has hired a team of 50 security consultants to investigate the breach. But the number of customer records that might have been exposed by the attack and the value of financial losses sustained as a result of the assault is still unknown. TJX has taken a $5m charge to cover the investigation, legal fees and costs associated with explaining the problem to its customers. But it has not made any contingencies for legal penalties or restitution that it could be foreced to make.

An update on TJX's investigation can be found in a press release here.

The update on the hacking investigation came on Wednesday as TJX announced its annual financial results. TJX's sales for the year were $17.4bn, a nine per cent increase over last year, with net income of $738,000. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Critical Adobe Reader and Acrobat patches FINALLY make it out
Eight vulns healed, including XSS and DoS paths
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.