BreachExchange mailing list archives

The TJX Companies, Inc. Victimized by Computer Systems Intrusion


From: "Dissent" <Dissent () pogowasright org>
Date: Wed, 17 Jan 2007 15:40:10 -0500 (EST)

http://home.businesswire.com/portal/site/google/index.jsp?ndmViewId=news_view&newsId=20070117005971&newsLang=en

(Press Release):

The TJX Companies, Inc. (NYSE:TJX) today announced that it has
suffered an unauthorized intrusion into its computer systems that
process and store information related to customer transactions. While
TJX has specifically identified some customer information that has
been stolen from its systems, the full extent of the theft and
affected customers is not yet known. This intrusion involves the
portion of TJX’s computer network that handles credit card, debit
card, check, and merchandise return transactions for customers of its
T.J. Maxx, Marshalls, HomeGoods and A.J. Wright stores in the U.S. and
Puerto Rico, and its Winners and HomeSense stores in Canada, and may
involve customers of its T.K. Maxx stores in the U.K. and Ireland. The
intrusion could also extend to TJX’s Bob’s Stores in the U.S. The
Company immediately alerted law enforcement authorities of the crime
and is working closely with them to help identify those responsible.
TJX is also cooperating with credit and debit card issuers and
providing them with information on the intrusion.

[...]

 Through its investigation, TJX has learned the following with respect
to the intrusion:

    * An unauthorized intruder accessed TJX's computer systems that
process and store information related to customer transactions for
its T.J. Maxx, Marshalls, HomeGoods and A.J. Wright stores in the
U.S. and Puerto Rico and its Winners and HomeSense stores in
Canada.
    * The Company is concerned that the intrusion may extend to the
computer systems that process and store information related to
customer transactions for T.K. Maxx in the U.K. and Ireland,
although TJX’s investigation has not yet been able to confirm any
such intrusion. It is possible that the intrusion may extend to
Bob's Stores.
    * Portions of the information stored in the affected part of TJX’s
network regarding credit and debit card sales transactions in
TJX’s stores (excluding Bob’s Stores) in the U.S., Canada, and
Puerto Rico during 2003, as well as such information for these
stores for the period from mid-May through December, 2006 may have
been accessed in the intrusion. TJX has provided the credit card
companies and issuing banks with information on these and other
transactions.
    * To date, TJX has been able to specifically identify a limited
number of credit card and debit card holders whose information was
removed from its system and is providing this information to the
credit card companies. In addition, TJX has been able to
specifically identify a relatively small number of customer names
with related drivers' license numbers that were also removed from
its system, and TJX is contacting these individuals directly.
    * TJX is continuing its investigation seeking to determine whether
additional customer information may have been compromised. TJX
does not know if it will be able to identify additional
information of specific customers that may have been taken.

[...]

-- 
Privacy-related news and resources: http://www.pogowasright.org
Privacy news headlines feed:
http://www.pogowasright.org/backend/pogowasright.rss

_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 144 million compromised records in 536 incidents over 7 years.



Current thread: