Original URL: http://www.channelregister.co.uk/2007/08/16/tjx_charges/
TJX, the American retail giant, has set aside $118m to cover costs and potential liability arising from a security breach to its database systems.
Crooks gained access to 45.6m credit and debit card records during the breach, which lasted 17 months between July 2005 and January 2007. TJX's $118m after-tax cash charge for Q2 2008 includes $11m in security consultancy fees and other expenses directly related to the attack and a contingency fund of $107m to cover liability payments arising from pending lawsuits.
In addition, TJX expects to chalk up non-cash charges of approximately $21m for FY2009.
The funds set aside by TJX are a fraction of the $1bn-plus losses estimated by analyst firms, and much less than guesstimates from security consultancies, who have a clear axe to grind in talking up the financial impact of security breaches. Tellingly, investors haven't marked down TJX share price significantly in the expectation of major losses down the road.
TJX announced the impact of the intrusions into its systems on its bottom line as it announced Q2 2008 results (http://home.businesswire.com/portal/site/tjx/index.jsp?epi-content=GENERIC&newsId=20070814005701&ndmHsc=v2*A938775600000*B1187308101000*C4102491599000*DgroupByDate*J2*N1001148&newsLang=en&beanID=1809476786&viewID=news_view). Net sales for Q2 2008 were up nine per cent to $4.3bn, resulting in an income of $59m. ®
TJX employee fired for exposing shoddy security practices (23 May 2008)
http://www.channelregister.co.uk/2008/05/23/tjx_fires_whistleblower/
US auto parts store spills data to hackers (1 April 2008)
http://www.channelregister.co.uk/2008/04/01/auto_parts_store_hack/
TJX settles with banks over credit card breach (20 December 2007)
http://www.channelregister.co.uk/2007/12/20/tjx_bank_settlement/
TJX agrees to pay banks $41m to cover Visa losses (3 December 2007)
http://www.channelregister.co.uk/2007/12/03/tjx_settlement_agreement/
Data breach costs soar (29 November 2007)
http://www.channelregister.co.uk/2007/11/29/data_breach_cost_survey/
TJX consumer settlement sale offer draws scorn (20 November 2007)
http://www.channelregister.co.uk/2007/11/20/tjx_settlement_offer_kerfuffle/
TJX breach was twice as big as admitted, banks say (24 October 2007)
http://www.channelregister.co.uk/2007/10/24/tjx_breach_estimate_grows/
Experts fret over credit card compliance (27 September 2007)
http://www.channelregister.co.uk/2007/09/27/pci_dss_compliance/
Ukrainian jet setter in world's largest cyber heist? (22 August 2007)
http://www.theregister.co.uk/2007/08/22/possible_break_in_tjx_investigation/
Monster Trojan monsters job seekers' records (21 August 2007)
http://www.channelregister.co.uk/2007/08/21/monster_trojan_steals_millions_of_records/
Lax security led to TJX breach (4 May 2007)
http://www.channelregister.co.uk/2007/05/04/txj_nonfeasance/
TJX finds self at bottom of 300-bank pig pile (26 April 2007)
http://www.channelregister.co.uk/2007/04/26/tjx_suit/
Consumers baulk at returning to hacked stores (17 April 2007)
http://www.channelregister.co.uk/2007/04/17/data_breach_survey/
How much do security breaches cost anyway? (12 April 2007)
http://www.channelregister.co.uk/2007/04/12/breach_cost_estimate/
TJX lost up to 45.6m card numbers (29 March 2007)
http://www.channelregister.co.uk/2007/03/29/tjx_credit-card_debacle/
Six individuals suspected of using stolen TJX data (21 March 2007)
http://www.theregister.co.uk/2007/03/21/tjx_info_arrests/
TJX security breach fears grow (22 February 2007)
http://www.theregister.co.uk/2007/02/22/tjx_security_breach/
Fraud linked to TJX data heist spreads (29 January 2007)
http://www.theregister.co.uk/2007/01/29/tjx_data_fraud/
Hacked to the TK Maxx (19 January 2007)
http://www.channelregister.co.uk/2007/01/19/tjx_hack_alert/
© Copyright 2008