Alabama
Alaska
Arizona
Arkansas
California
Colorado
Connecticut
D.C.
Delaware
Florida
Georgia
Hawaii
Idaho
Illinois
Indiana
Iowa
Kansas
Kentucky
Louisiana
Maine
Maryland
Mass.
Michigan
Minnesota
Mississippi
Missouri
Montana
Nebraska
Nevada
New Hampshire
New Jersey
New Mexico
New York
N.Carolina
N.Dakota
Ohio
Oklahoma
Oregon
Pennsylvania
Rhode Island
S.Carolina
S.Dakota
Tennessee
Texas
Utah
Vermont
Virginia
Washington
W.Virginia
Wisconsin
Wyoming
Law Firm Website Design Companies : The Good, The Bad, and The Ugly

Data Theft Believed to Be Biggest Hack

  Business  -   POSTED: 2007/03/29 19:10

A hacker or hackers stole data from at least 45.7 million credit and debit cards of shoppers at off-price retailers including T.J. Maxx and Marshalls in a case believed to be the largest such breach of consumer information.

For the first time since disclosing the theft more than two months ago, the parent company of nearly 2,500 discount stores put a number on how much card data was compromised _ and it's a number TJX Cos. acknowledges could go still higher.

Experts say TJX's disclosures in a regulatory filing late Wednesday revealed security holes that persist at many firms entrusted with consumer data: failure to promptly delete data on customer transactions, and to guard secrets about how such data is protected through encryption.

"It's not clear when information was deleted, it's not clear who had access to what, and it's not clear whether the data kept in all these files was encrypted, so it's very hard to know how big this was," said Deepak Taneja, chief executive of Aveksa, a Waltham, Mass.-based firm that advises companies on information security.

The case has led banks to reissue cards to customers as a precaution against further fraud beyond cases detected as far away as Sweden and Hong Kong, according to the Massachussets Bankers Association, which is tracking fraud reports linked to Framingham, Mass.-based TJX, parent company of stores across North America and the United Kingdom.

The only arrests believed tied to the case involve a gift card scam in which 10 people are suspected of buying data from the TJX hackers to purchase Wal-Mart gift cards in northern Florida. The group _ who aren't believed to have committed the TJX hack _ then used the cards to buy $1 million worth of electronics and jewelry at Wal-Mart's Sam's Club stores, according to Gainesville, Fla., police.

Information from 45.7 million cards was stolen from transactions beginning in January 2003 and ending Nov. 23 of that year, TJX said in the filing with the Securities and Exchange Commission after business hours Wednesday. TJX did not estimate the number of cards from which information was stolen for transactions occurring from Nov. 24, 2003, to June 28, 2004.

TJX said about three-quarters of the 45.7 million cards had either expired at the time of the theft, or the stolen information didn't include security code data from the cards' magnetic stripes. Starting in September 2003, TJX began masking the codes by storing them in computers as asterisks rather than numbers, the company said.

The filing also said another 455,000 customers who returned merchandise without receipts had their data stolen, including driver's license numbers.

With at least 46 million consumer records accessed, the TJX case outranks the previous largest case tracked by the Privacy Rights Clearinghouse: a June 2005 disclosure by credit card processor CardSystems that hackers accessed accounts of 40 million card holders.


Legal News | Breaking News | Terms & Conditions | Privacy | Law Firm Web Design, Attorney Website Design by Law Promo

ⓒ Breaking Legal News. All Rights Reserved.

The content contained on the web site has been prepared by BLN as a service to the internet community and is not intended to constitute legal advice or a substitute for consultation with a licensed legal professional in a particular case.
   More Legal News
   Legal Spotlight
   Exclusive Commentaries
   Attorney & Blog - Blog Watch
   Law Firm News  1  2  3  4  5  6 
   Lawyer & Law Firm Links
San Francisco Trademark Lawyer
San Francisco Copyright Lawyer
www.onulawfirm.com
New Rochelle Accidents Attorneys
New Rochelle Personal Injury
www.kboattorneys.com
Chicago Business Lawyer
Cook County Contract Law
www.rothlawgroup.com
Canton Criminal Lawyer
Canton DUI lawyer
www.cantoncriminalattorney.com
Surry County Criminal Defense Lawyers
Yadkin County Family Law Attorneys
www.dirussolaw.com
Oregon DUI Law Attorney
Eugene DUI Lawyer. Criminal Defense Law
www.mjmlawoffice.com
Houston Car Accident Attorneys
Wrongful Death Attorneys Houston
Houston Wrongful Death
New York Adoption Lawyers
New York Foster Care Lawyers
Adoption Pre-Certification
www.lawrsm.com
Santa Ana Workers' Compensation Lawyers
www.gentryashtonlaw.com
Indianapolis personal injury lawyer
Brain injury lawyer Indianapolis
www.rwp-law.com
Eugene Bankruptcy Attorney
Bankruptcy Attorney Eugene
willamettevalleybankruptcy.com
Denver, Colorado Drug Crimes Lawyer
www.vanlandinghamlaw.com
   More Legal News  1  2  3  4  5  6
   Legal News Links
  Click The Law
  Daily Bar News
  The Legal Voice
  The Legal Report
  Legal News Post
  Crisis Legal News
  Legal News Journal
  Law Firm Logos
  Eugene Criminal Defense Law
  Attorney Web Design
  Immigration Law Web Design
  Law Firm Directory