[Dataloss] follow-up: U.S. Indicts 11 For Alleged TJX Data Theft

[security curmudgeon]

---------- Forwarded message ----------
From: InfoSec News <alerts at infosecnews.org>

http://www.crn.com/security/209903419

By Stefanie Hoffman
ChannelWeb
Aug. 05, 2008

A U.S. federal grand jury indicted 11 people Tuesday on charges that 
included the alleged theft of more than 45 million credit and debit card 
numbers from retail giant TJX in what officials call one of the largest 
data heists in history.

The U.S. Attorney's office in Boston said that the individuals indicted 
were responsible for "wardriving" and then hacking into wireless networks 
of numerous retailers, including TJX companies, BJ's Wholesale Club, 
OfficeMax (NYSE:OMX), Boston Market, Barnes & Noble, Sports Authority, 
forever 21 and DFW Inc. in order to steal tens of millions of credit card 
numbers.

The Framington, Mass.-based retail giant TJX, which owns discount clothing 
stores TJ Maxx and Marshall's, was by far the hardest hit, suffering a 
loss of 45.7 million card numbers, which the retailer revealed in March of 
2007.

[...]