TJX Data Theft Blamed on Wireless

The fallout from TJX's infamous customer data theft doesn't get any better for the Framingham, Mass.-based retail behemoth. (Incidentally, TJX's corporate headquarters is just down the road from where most of the Redmond magazine editors have set up shop).

A Canadian investigative panel has found fault with both the company's wireless technology security and its data retention practices. The eight-month investigation revealed that the hackers got TJX customers' credit card numbers by intercepting wireless signals from two Miami-area Marshalls stores.

Canadian Privacy Commissioner Jennifer Stoddart also singled out how TJX held onto older customer data it should have purged long ago. "The company collected too much personal information, kept it too long and relied on weak encryption technology to protect it," Stoddart said at a recent information security conference in Canada. Guess TJX won't be opening any new stores north of the border any time soon.

Stoddard's recommendations for TJX included masking the information on driver's licenses when they're collected during returns. TJX says it's already working on that.

The situation for those whose card numbers were stolen continues to be a nightmare. Experts say it takes a huge investment of time and money to clear your name once a crook has gone wild with your card numbers or account information. With my financial situation, if someone stole my identity, they'd probably want to give it back.

Has your company ever had any sort of security breach? How did you react and respond? How did that event change the way you manage and monitor your security infrastructure? Steal a moment to let me know at llow@redmondmag.com.

Posted by Lafe Low on 09/26/2007 at 1:23 PM


Featured

  • First Chromium-Based Edge Browser Beta Release Now Available

    Microsoft Edge Insider Program participants now have access to the Beta Channel release of Microsoft's Chromium-based Edge Web browser on the Windows and Mac platforms.

  • Microsoft Planning To Answer Windows Virtual Desktop Questions Next Week

    Microsoft has set aside time to answer questions about its emerging Windows Virtual Desktop service on Wednesday of next week, according to an announcement.

  • With EPYC Rome Chips, AMD Could Eclipse Intel in Datacenter

    AMD's high-profile EPYC 7002 launch has datacenter analysts wondering if the end of Intel's long reign is nigh.

  • Microsoft Buys jClarity for Azure-Based Java Workloads

    In a bid to support its "continued contributions to open source while driving increased performance for Java workloads on Azure," Microsoft on Monday announced its acquisition of jClarity.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.