pmcnamara
News Editor

TJX data theft called largest ever: 45.7M credit card numbers

Opinion
Mar 29, 20073 mins

So it turns out that the TJX data breach first reported earlier this year couldn’t have been any worse if the company had simply hired the hacker and given him all-access network privileges.

Since exactly what happened remains unknown or undisclosed, I suppose we cannot rule out that possibility.

A whopping 45.7 million credit and debit card numbers – the largest loss of its kind, according to experts quoted in press reports – were lifted in this heist. TJX is headquartered in Framingham, Mass., the next town over from where I sit.

“It’s the biggest card heist ever,” Gartner’s Avivah Litan told the Boston Globe. “It’s done considerable damage.”

In addition to the 45.7 million cards, another 455,000 shoppers who returned items without a receipt – this will teach ’em – had their personal data stolen.

The grim news was revealed yesterday in financial reports filed by the company.

The magnitude of the theft – merely the most prominent in what seems to be a never-ending string – is sure to fan the flames for more investigations such as the one recently launched by the Federal Trade Commission.

And it’s also sure to have TJX executives sharpening their pencils to craft one of those increasingly common apology letters that have become standard fare in these situations. Network World recently took a look at the best of breed when it comes to this sort of thing.

What a mess.

(Update: A few background/supplemental stories around the TJX situation: Breach worse than thought … TJX: A case study in what to do wrong … Mass. attorney general leads probe … TJX apology letter: We give it a 5 … Bill would put responsibility on retailers … Boards need to wake up … and … So sorry we lost your data.)

Welcome regulars and passersby. Here are a few more recent Buzzblog items. And, if you’d like to receive Buzzblog via e-mail newsletter, here’s where to sign up.

Newspaper pulls plug on “Anti-Christ” contributor.

Here’s how the contest winner found my address.

More than 1 in 10 Brits victimized online? … Not bloody likely.

Check Point box plays “Family Guy,” too.

NYPD spied broadly prior to ’04 GOP convention.

Blogger’s screwup, lemming-like media spread false report about Edwards campaign.

Maker of anti-Clinton ‘Net ad revealed, linked to Obama, now jobless

“Bong Hits 4 Jesus” case may decide if schools can control the likes of MySpace.

IT consultants laughing all the way to the bank.

The Onion tees up Vista … hilarity fails to ensue.