Marshall's and T.J. Maxx Informative - 45.7 Million Credit Card Numbers Stolen In Breach

Review by D. on 2007-03-30
About 75 percent of the debit- and credit-cards were either expired or the security data stored on the magnetic strip wasn't stolen, the company said in a regulatory filing late yesterday.

TJX Cos., owner of Marshalls and T.J. Maxx, the go-to stores for career gals on a budget with no access to a Filene’s Basement, lost 45.7 million credit-card numbers to theft, the biggest theft of such data.

About 75 percent of the debit- and credit-cards were either expired or the security data stored on the magnetic strip wasn't stolen, the company said in a regulatory filing late yesterday.

TJX reported the breach in January. They waited until almost April to reveal the scope of the breach.

TJX also said personal data on 455,000 people, including numbers for drivers' licenses and military identification cards, were stolen. The company doesn't know if any of the credit-card numbers or personal data were used by thieves.

The company will face lawsuits related to the breach in state and federal courts in Alabama, California, Massachusetts, Puerto Rico and in provincial courts in six Canadian provinces.

by Mike Bevel,
March 30, 2007
Comments:10 Replies - Latest reply on 2007-03-31
Posted by Anonymous on 2007-03-30:
Posted by S on 2007-03-30:
Yet another reason to use a random credit card number generator. I heard one card company is working on a portable card that would allow for similar functionality.... Each transaction would be a limited one time only charge with that particular randomized number. Or maybe I just dreamed that... I can't remember.... Getting old!
Posted by D. on 2007-03-31:
Too many BK Whoppers Sparty!
Posted by Anonymous on 2007-03-31:
The thefts took place over a period of 18 months. A 'worm' was introduced via some sales terminals giving the thieves access to the data at any time. So far 7 people were arrested after spending close to $8 million for electronics and other goodies. Last year the same happened at DSW. Thousands of people got a replacement credit card with a letter of explanation.

Sparticus, you are correct but so far it's only for online transactions. The random number portable card has too many logistical problems to be practicable.
Posted by tnchuck100 on 2007-03-31:
Our bank sent us a new debit card because of this. Strange part was the letter of explanation did not say what company was at fault. I called the bank (where the notice came from, not my branch) to find out what company was responsible for this. They refused to tell me. The next time I was in my local branch, where they know me, they readily told me who it was.
Posted by rainy_k on 2007-03-31:
Very alarming post. All the more reason to monitor your credit monthly. Many sites offer daily monitoring for a low fee each month, I use freecreditreport.com where you can get the first month free, and then pay a charge of $12/month to have your credit continuously monitored. I will continue to pay for this service after reading information like this.
Posted by Anonymous on 2007-03-31:
Good review and I agree with rainy k!

I voted you very helpful, keep up the good work, DB!
Posted by D. on 2007-03-31:
Thankyou L!
Posted by Nohandle on 2007-03-31:
TJX, a retail organization, now says 46 million people could be affected by a huge data theft. The company discovered a rogue program running on its system in December. It turns out that the criminals involved had been milking the system for 18 months.

Some of the data that was stolen was subsequently deleted by TJX. So it really isn't sure how many people might be affected, or who they are. The investigation is continuing. A few people have been arrested in this case. But they probably just bought credit card numbers from the thieves.

You should do everything possible to protect your confidential information. But there is nothing you can do to protect yourself from corporate carelessness. So keep an eye on your credit report. Problems will pop up there first.

The above was copied from the Kim Komando electronic newsletter from today. Everything stated in other responses from members suggests the same precautions. I don't have a TJX credit card, but with all the mergers of companies, who knows who has your credit card information now.
Posted by grandma005 on 2007-03-31:
I belong to creditreport.com they charge $40.00 fee for the whole year.

Your Name:
(displayed with your comment)
Your E-mail:

Your Experience/Advice:
Check spelling

By clicking submit you agree that you have read and accept the Terms of Service & Privacy Policy.

Note: All comments are reviewed by a moderator before being published. Please be sure to read our guidelines before commenting.