[Dataloss] TJX breach involved 45.7m cards, company reports

[Adam Shostack]

Largest breach?  What about Axciom at 1.6 billion records?


On Thu, Mar 29, 2007 at 02:06:15AM +0000, lyger wrote:
| 
| (Keep in mind that these are credit card NUMBERS, and not PEOPLE... people 
| often have more than one card.  Attrition's Dataloss Database (DLDOS) will 
| be updated accordingly)
| 
| http://www.boston.com/business/ticker/2007/03/tjx_breach_invo.html
| 
| At least 45.7 million credit and debit card numbers were stolen by hackers 
| who broke into the computer systems at the TJX Cos. in Framingham and the 
| United Kingdom and siphoned off data over a period of several years, 
| making it the biggest breach of personal data ever reported, according to 
| security specialists.
| 
| TJX, the Framingham discounter that operates the T.J. Maxx and Marshalls 
| clothing chains, also reported in a regulatory filing yesterday that 
| another 455,000 customers who returned merchandise without receipts had 
| their personal data stolen, including drivers' license numbers. "It's the 
| biggest card heist ever," said Avivah Litan, vice president of Gartner 
| Inc. "This was obviously done over a long period of time, in many 
| locations. It's done considerable damage."
| 
| [...]
| _______________________________________________
| Dataloss Mailing List (dataloss at attrition.org)
| http://attrition.org/dataloss
| Tracking more than 158 million compromised records in 609 incidents over 7 years.