TJX breach could top 94 million accounts

BOSTON – At least 94 million Visa and MasterCard accounts may have been exposed to potential fraud in a data breach at TJX Cos., nearly double the previous estimate by the discount retailer.

The figure was included in court filings this week that cited officials from the credit card associations.

The filings in a bank case against TJX indicated that fraud-related losses involving Visa cards alone range from $68 million to $83 million, spread across 13 countries. One filing warned that the total will rise as thieves continue to use data from compromised cards.

You know, these are going to be sold off for a period of time in the future, so it’s going to continue for some time out there,” Joseph Majka, Visa USA’s vice president of investigations and fraud management, said in court documents unsealed late Tuesday.

Depositions of security officials at Visa and MasterCard Inc., the two biggest credit card associations, suggest the breach was far bigger than TJX has indicated. Even before the latest numbers, independent organizations that track data breaches had called the case the largest ever.

TJX said in March that at least 45.7 million of its shoppers’ cards had been compromised, although it acknowledged it may never learn the total number. However, the Framingham, Mass.-based owner of 2,500 stores including T.J. Maxx and Marshalls has said about three-quarters of the cards had either expired by the time of the theft, or had masked data in the magnetic strip, meaning the information was stored as asterisks rather than numbers.

In an Aug. 31 deposition with an attorney for banks suing to recover breach-related losses, Visa’s Majka said the association had alerted card-issuing banks and other institutions about 65 million Visa card accounts that may have been compromised. That number was as of June, he said.

“I’m not sure if this is, in fact, the final number,” he said.

A Visa spokesman declined further comment Wednesday.

Neil Maguire, a security official at MasterCard, said in a Sept. 27 deposition that his card association believed it had “roughly 29 million” potentially exposed cards.



Bookmark with:


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: