TJX Financial Data Thefts

This page is currently under construction. Check back for updates soon.

Case Summary

At various dates between July 2005 and January 2006, intruders used access to systems within the corporate network of TJX Companies, Inc., to obtain and exfiltrate 45.7 million payment card (i.e., credit or debit card) records. In March 2007, six suspects were arrested, with four more at large, all believed to be involved in the data theft and an elaborate scheme for using the stolen data to make an estimated $8 million in purchases of gift cards and electronics equipment.

(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. pp355)

Recommended Literature

• Wikipedia entry
• Jenn Abelson, Breach of Data at TJX Is Called the Biggest Ever: Stolen Numbers Put at 45.7 Million, Mar 29, 2007.