- The 10 dumbest mistakes network managers make
- Six Windows 7 features admins will actually care about
- Why the iPhone can't be "killed"
- Nortel enterprise chief wants to bring back Bay
- More porn sneaks onto the iPhone
In the face of a massive data security breach by one of the state’s largest companies, TJX, Massachusetts lawmakers are set to look at a bill that would make companies liable when their security systems are hacked and credit card data or personal information is stolen.
According to reports, the law would be one of the first of its kind in the United States, forcing retailers and other companies along with government agencies and nonprofit groups to pay for losses if financial data is stolen, said state Rep. Michael Costello (D), in a statement.
According a Wall St. Journal article today, the proposal in Massachusetts would: "require companies whose security systems are breached to assume full financial responsibility for any fraud-related losses, costs associated with the canceling and reissuing of cards, and -- in cases of identity theft -- the freezing of accounts and credit information. The bill would apply to any company doing business in Massachusetts, wherever it may be based."
Some 30 states have laws that require companies to notify customers immediately when data breaches occur, though most of the statutes let companies delay notification while law enforcement agencies investigate, experts say.
Proponents hope the Massachusetts law would prompt retailers to invest more heavily in security technology and trigger other states to pass similar legislation. Banks, who absorb most of the nefarious charges when these data breaches occur would also like to see such bills. U.S. House Financial Services Committee Chairman Barney Frank, a Massachusetts Democrat, said in a Reuters report he is drafting a similar provision for a federal bill that he expects to introduce to Congress in the next month or two.
And as for TJX, the news just keeps getting worse: An ongoing investigation of the breach has shown that intruders gained access to TJX systems almost a full-year earlier than first revealed by TJX -- and compromised more payment card data than previously believed, the company said. In addition, TJX confirmed that transaction data involving TJX-owned stores in the United Kingdom and Ireland were also affected by the intrusion.
The retailer still hasn’t said how many customers have been affected by the break-in, but published reports have stated the breach last month compromised tens of millions of credit and debit cards. In addition Massachusetts Attorney General Martha Coakley will lead a civil investigation by dozens of states into the security breach disclosed last month by The TJX Companies, the owner of T.J. Maxx and Marshalls retailers.
Comment