Feeds

TJX security breach fears grow

How deep does the rabbit-hole go?

Build a business case: developing custom apps

TJX, the US retailing giant,says a hacker intrusion against its credit card transaction processing system is more serious than first reported.

The breach, detected in December 2006, affected systems handling debit and credit card transactions as well as cheque purchases and refunds at the company's TJ Maxx, Marshalls, HomeGoods and A J Wright stores in the US and Puerto Rico; and its Winners and HomeSense stores in Canada.

Last month, TJX said the intrusion took place between May 2006 to January 2007. The firm now reckons attacks date back to July 2005 and involve transactions up to June 2004 - previously, it thought they were confined to 2003. It still maintains names and addresses were not included with the credit and debit card data reckoned to have been compromised. But It's beginning to look more likely that some of the chain's customers in the UK and Ireland, the retailer operates the popular clothing store TK Maxx, may have been put at risk. TJX’s investigators have found evidence of an intrusion to the portion of its computer system that processes T.K. Maxx customer transactions.

TJX now reckons a number of drivers' license numbers together with related names and addresses were also compromised. This data relates to receipted merchandise returns at its T.J. Maxx, Marshalls, and HomeGoods stores in the US and Puerto Rico for the last four months of 2003 and May and June 2004. TJX intends to write to customers in this category, warning that their details might have been exposed.

TJX has hired a team of 50 security consultants to investigate the breach. But the number of customer records that might have been exposed by the attack and the value of financial losses sustained as a result of the assault is still unknown. TJX has taken a $5m charge to cover the investigation, legal fees and costs associated with explaining the problem to its customers. But it has not made any contingencies for legal penalties or restitution that it could be foreced to make.

An update on TJX's investigation can be found in a press release here.

The update on the hacking investigation came on Wednesday as TJX announced its annual financial results. TJX's sales for the year were $17.4bn, a nine per cent increase over last year, with net income of $738,000. ®

Endpoint data privacy in the cloud is easier than you think

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
iWallet: No BONKING PLEASE, we're Apple
BLE-ding iPhones, not NFC bonkers, will drive trend - marketeers
Multipath TCP speeds up the internet so much that security breaks
Black Hat research says proposed protocol will bork network probes, flummox firewalls
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
Microsoft's Euro cloud darkens: US FEDS can dig into foreign servers
They're not emails, they're business records, says court
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
prev story

Whitepapers

7 Elements of Radically Simple OS Migration
Avoid the typical headaches of OS migration during your next project by learning about 7 elements of radically simple OS migration.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
A new approach to endpoint data protection
What is the best way to ensure comprehensive visibility, management, and control of information on both company-owned and employee-owned devices?