TJX breach occurred seven months before it was detected


The data breach at TJX Companies Inc. that exposed sensitive credit and debit card data on an unknown number of customers occurred nearly seven months before it was detected, a company spokeswoman said today.

The breach occurred as far back as mid-May 2006 but was only discovered in mid-December, said company spokeswoman Debra McConnell. The original statement from Framingham, Mass.-based TJX announcing the data compromise last week only mentioned the discovery of the breach in December and made no mention of when the breach actually happened.

McConnell said the decision not to mention when the breach happened did not represent an "inconsistency" in the company's public reporting of the incident. "We had said in our press release that we had discovered the breach in mid-December but we did not put in when it occurred," she said. TJX breach occurred seven months before it was detected

Linked by shanmuga Tuesday, 23rd January 2007 11:49PM