Clothes company sued over refusal to reveal hack attack details


Clothes company sued over refusal to reveal hack attack details

Antony Savvas

A major shareholder in the TJX group of clothes companies is suing the group to get more information on the well publicised hack of customer details the firm suffered.

The Arkansas Carpenters Pension Fund, which owns 4,500 shares in TJX, claims it was rebuffed by the firm when it asked to see documents covering the way it handled the hack, which enabled attackers to steal thousand of customer financial details.

The security breach is also believed to have affected UK customers who shopped at the TK Maxx subsidiary.

The information stolen is said to have already been used to carry out fraud at other companies, with US agencies investigating a retail fraud said to be worth around £4.2m.

The lawsuit was filed this week in a Delaware court, under a law that allows shareholders to sue to get access to corporate documents for certain purposes.

The Arkansas pension fund wants the documents to enable it to check whether the TJX board has correctly overseen the handling of customer data, according to court papers.

The hacking took place between 2005 and mid-December 2006, when it was discovered by TJX, according to the company. The hacked data covered stored retail information, including credit card numbers, going back to 2003. 

TK Maxx customer data under threat

Comment on this article:

Email Alerts

Register now to receive IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy