[Dataloss] TJX breach involved 45.7m cards, company reports

lyger lyger at attrition.org
Thu Mar 29 02:06:15 UTC 2007


(Keep in mind that these are credit card NUMBERS, and not PEOPLE... people 
often have more than one card.  Attrition's Dataloss Database (DLDOS) will 
be updated accordingly)

http://www.boston.com/business/ticker/2007/03/tjx_breach_invo.html

At least 45.7 million credit and debit card numbers were stolen by hackers 
who broke into the computer systems at the TJX Cos. in Framingham and the 
United Kingdom and siphoned off data over a period of several years, 
making it the biggest breach of personal data ever reported, according to 
security specialists.

TJX, the Framingham discounter that operates the T.J. Maxx and Marshalls 
clothing chains, also reported in a regulatory filing yesterday that 
another 455,000 customers who returned merchandise without receipts had 
their personal data stolen, including drivers' license numbers. "It's the 
biggest card heist ever," said Avivah Litan, vice president of Gartner 
Inc. "This was obviously done over a long period of time, in many 
locations. It's done considerable damage."

[...]


More information about the Dataloss mailing list