Vincent Arnold

Significant security shortcomings led to the data breach at retail giant TJX — a breach which credit-card companies now say compromised more than 94 million accounts, according to court documents made public on Thursday.

The documents — part of the paperwork filed in a lawsuit brought by more than 300 New England banks against the retailer — cite Visa USA and Mastercard International executives as well as a security consultant to paint a grim picture of the lack of security that allowed intruders into the retailer’s computer systems. The consultant retained by TJX to investigate the breach found that the company had not complied with nine of the twelve security measures mandated by credit-card companies under the Payment Card Industry (PCI) Data Security Standard (DSS), the court documents stated.

Source: Security Focus

This entry was posted on Friday, November 2nd, 2007 at 4:08 am and is filed under Security Breach.