Make us your home page
Instagram

Parent of TJMaxx, Marshalls pays more to settle 2006-2007 data breach investigation

The parent of TJMaxx and Marshalls will pay $9.75 million and allow an unprecedented three years of state government monitoring of its data security effort to settle an investigation into how hackers swiped 100 million credit and debit card numbers three years ago.

TJX Cos. on Tuesday struck the deal with attorneys general from 41 states. It used some of the $107 million it set aside last year to deal with the fallout of the breach that went on for 17 months in 2006 and 2007. So far, $41 million has gone to reimbursing banks for their losses, and the state settlement will pay for the cost of its inquiry.

Florida, the site of the initial TJMaxx-Marshalls breach and much of the fraud it stirred up, was among five lead states to negotiate the settlement.

After describing TJX as a victim as much as consumers were, Florida Attorney General Bill McCollum said the deal shows he is serious that "companies need to take the appropriate precautions to protect the data with which customers entrust them."

TJX chief financial officer Jeffrey Naylor termed the agreement a sign that the company and state law enforcement officials are resolved to better protect consumer data from hackers. The deal spells out specific steps for TJX to tighten data security, requires notice in 10 days if there is another lapse and earmarks $500,000 for the state to monitor compliance and look into other increasingly common payment card data breaches.

In the TJX case, which started in a parked van outside a Miami Marshalls, hackers tapped into a TJX wireless network that transmits credit and debit numbers between stores and a central data center. They swiped personal information such as the driver's license numbers of 450,000 people who returned merchandise without receipts. Crooks as far away as Sweden and Hong Kong tried to use the card numbers. Police in Gainesville arrested a ring that allegedly implanted the numbers on enough gift cards to buy $3 million in valuables at Wal-Mart and Sam's Clubs.

Usually card issuers eat bogus charges and issue new cards. But customers are angered by the uncertainty of losing money and are not always reimbursed. Many card issuers refuse to tell customer which retailer's system was tapped.

The state settlement follows a recent TJX settlement with the U.S. Federal Trade Commission, but not everybody sees government looking over the payment industry's shoulder as a good thing.

"If it's protecting consumers, that's one thing," said Avivah Litan, a computer security expert with Gartner Research. "But the government should not get out of its league dictating technology solutions. It changes faster than they can keep up."

Mark Albright can be reached at [email protected] or (727) 893-8252.

Parent of TJMaxx, Marshalls pays more to settle 2006-2007 data breach investigation 06/23/09 [Last modified: Tuesday, June 23, 2009 9:24pm]
Photo reprints | Article reprints

© 2017 Tampa Bay Times

    

Join the discussion: Click to view comments, add yours

Loading...
  1. Massachusetts firm buys Tampa's Element apartment tower

    Real Estate

    TAMPA — Downtown Tampa's Element apartment tower sold this week to a Massachusetts-based real estate investment company that plans to upgrade the skyscraper's amenities and operate it long-term as a rental community.

    The Element apartment high-rise at 808 N Franklin St. in downtown Tampa has been sold to a Northland Investment Corp., a Massachusetts-based real estate investment company. JIM DAMASKE  |  Times
  2. New York town approves Legoland proposal

    News

    GOSHEN, N.Y. — New York is one step closer to a Lego dreamland. Goshen, a small town about fifty miles northwest of the Big Apple, has approved the site plan for a $500 million Legoland amusement park.

    A small New York town, Goshen approved the site plan for a $500 million Legoland amusement park. Legoland Florida is in Winter Haven. [Times file  photo]
  3. Jordan Park to get $20 million makeover and new senior housing

    Real Estate

    By WAVENEY ANN MOORE

    Times Staff Writer

    ST. PETERSBURG —The St. Petersburg Housing Authority, which bought back the troubled Jordan Park public housing complex this year, plans to spend about $20 million to improve the 237-unit property and construct a new three-story building for …

    Jordan Park, the historic public housing complex, is back in the hands of the St. Petersburg Housing Authority. The agency is working to improve the 237-unit complex. But the latest plan to build a new three-story building for seniors will mean 31 families have to find new homes. [LARA CERRI   |   Tampa Bay Times]
  4. Coming soon at two Tampa Bay area hospitals: a cancer treatment that could replace chemo

    Health

    A new cancer treatment that could eventually replace chemotherapy and bone marrow transplants — along with their debilitating side effects — soon will be offered at two of Tampa Bay's top-tier hospitals.

    Dr. Frederick Locke at Moffitt Cancer Center in Tampa is a principal investigator for an experimental therapy that retrains white blood cells in the body's immune system to fight cancer cells. The U.S. Food and Drug Administration approved these so-called "CAR-T" treatments for adults this month. In trials, 82 percent of cases responded well to the treatment, and 44 percent are still in remission at least eight months later, Locke said. [CHRIS URSO   |   Times]
  5. Regulator blasts Wells Fargo for deceptive auto insurance program

    Banking

    Wells Fargo engaged in unfair and deceptive practices, failed to properly manage risks and hasn't set aside enough money to pay back the customers it harmed, according to a confidential report by federal regulators.

    Wells Fargo engaged in unfair and deceptive practices, failed to properly manage risks and hasn't set aside enough money to pay back the customers it harmed, according to a confidential report by federal regulators.
[Photo by Spencer Platt/Getty Images, 2017]