Article

TJX breach compromised more than 94 million accounts

SearchSecurity.com Staff

The number of accounts compromised by the security breach at TJX Cos. is far larger than the 45 million reported in recent months, according to banks that are suing

    Requires Free Membership to View

the retail giant.

The Boston Globe reported Wednesday that more than 94 million accounts were compromised in the breach, according to court documents filed by the banking group suing TJX. That number includes 65 million Visa account numbers and 29 million MasterCard numbers. The banks are suing the Framingham, Mass.-based retailer for the staggering cost of issuing new credit cards to those affected by the breach.

In a report issued last month by Canadian privacy officials, TJX was criticized for collecting far too much consumer data for far too long while failing to upgrade its Wi-Fi security to the stronger WPA encryption protocol.

At the time of the breach, TJX was using the Wired Equivalent Privacy (WEP) encryption protocol, an older security standard. Wi-Fi Protected Access (WPA) replaces the original WEP security standard. It is compatible with the latest standard, IEEE 802.11i, referred to as WPA2.

TJX has maintained that at least 45.7 million credit and debit cards were stolen over an 18-month period by hackers who managed to penetrate its network. The attackers began their assault on TJX by exploiting Wi-Fi weaknesses. The Canadian officials said Tuesday that the point of entry for the attackers was two Marshals stores in Miami.


There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: