Feeds

TJX security breach fears grow

How deep does the rabbit-hole go?

Choosing a cloud hosting partner with confidence

TJX, the US retailing giant,says a hacker intrusion against its credit card transaction processing system is more serious than first reported.

The breach, detected in December 2006, affected systems handling debit and credit card transactions as well as cheque purchases and refunds at the company's TJ Maxx, Marshalls, HomeGoods and A J Wright stores in the US and Puerto Rico; and its Winners and HomeSense stores in Canada.

Last month, TJX said the intrusion took place between May 2006 to January 2007. The firm now reckons attacks date back to July 2005 and involve transactions up to June 2004 - previously, it thought they were confined to 2003. It still maintains names and addresses were not included with the credit and debit card data reckoned to have been compromised. But It's beginning to look more likely that some of the chain's customers in the UK and Ireland, the retailer operates the popular clothing store TK Maxx, may have been put at risk. TJX’s investigators have found evidence of an intrusion to the portion of its computer system that processes T.K. Maxx customer transactions.

TJX now reckons a number of drivers' license numbers together with related names and addresses were also compromised. This data relates to receipted merchandise returns at its T.J. Maxx, Marshalls, and HomeGoods stores in the US and Puerto Rico for the last four months of 2003 and May and June 2004. TJX intends to write to customers in this category, warning that their details might have been exposed.

TJX has hired a team of 50 security consultants to investigate the breach. But the number of customer records that might have been exposed by the attack and the value of financial losses sustained as a result of the assault is still unknown. TJX has taken a $5m charge to cover the investigation, legal fees and costs associated with explaining the problem to its customers. But it has not made any contingencies for legal penalties or restitution that it could be foreced to make.

An update on TJX's investigation can be found in a press release here.

The update on the hacking investigation came on Wednesday as TJX announced its annual financial results. TJX's sales for the year were $17.4bn, a nine per cent increase over last year, with net income of $738,000. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.