News

Clothes company sued over refusal to reveal hack attack details

A major shareholder in the TJX group of clothes companies is suing the group to get more information on the well publicised hack of customer details the firm suffered.

The Arkansas Carpenters Pension Fund, which owns 4,500 shares in TJX, claims it was rebuffed by the firm when it asked to see documents covering the way it handled the hack, which enabled attackers to steal thousand of customer financial details.

The security breach is also believed to have affected UK customers who shopped at the TK Maxx subsidiary.

The information stolen is said to have already been used to carry out fraud at other companies, with US agencies investigating a retail fraud said to be worth around £4.2m.

The lawsuit was filed this week in a Delaware court, under a law that allows shareholders to sue to get access to corporate documents for certain purposes.

The Arkansas pension fund wants the documents to enable it to check whether the TJX board has correctly overseen the handling of customer data, according to court papers.

The hacking took place between 2005 and mid-December 2006, when it was discovered by TJX, according to the company. The hacked data covered stored retail information, including credit card numbers, going back to 2003. 

TK Maxx customer data under threat

Comment on this article: computer.weekly@rbi.co.uk


Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
 

COMMENTS powered by Disqus  //  Commenting policy