follow-up: TJX consumer settlement sale offer draws scorn

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.theregister.co.uk/2007/11/20/tjx_settlement_offer_kerfuffle/

By John Leyden
20th November 2007

Law enforcement officials have poured cold water on plans by TJX to hold a 
one-day sale for customers as part of a proposed settlement for a consumer 
class-action case against the security incident-afflicted retailer.

TJX faces consumer and bank class action lawsuits over the exposure of an 
estimated 45.7m customer records as the result of a security breach that 
lasted for two distinct six month periods between 2003 and December 2006. 
Hackers broke into a system that stored data on credit card, debit card, 
cheque, and return details in an attack blamed on a poorly secured 
wireless network in one of its stores. Subsequent credit card frauds have 
being traced to data swiped as a result of these breaches and a number of 
arrests have been made.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml