TJMaxx Announces They Are Not Finished Screwing Their Customers

The breach of TJMaxx customer data, which I initially wrote about here, has been updated. Brian Krebs at the WaPo says that data loss could have affected as many as 94 Million accounts.

The cost of doing business when you can’t keep your data secured? How about One Billion Dollars, Dr. Evil.

From the WaPo here:

TJX Breach Was Twice as Bad as First Reported
The largest digital data theft ever recorded was bigger than originally thought. TJX, the Massachusetts retail giant that earlier this year disclosed that a series of network and computer intrusions had compromised more than 45 million credit- and debit-card numbers, may have lost more than twice that number.

A group of banks suing TJX over the compromises now claim that more than 94 million accounts were affected in the break-ins, according to The Boston Globe. The thefts included about 65 million Visa account numbers and roughly 29 million MasterCard credentials.

Several analysts have estimated that the total costs to TJX could run as high as $1 billion, including legal settlements and lost sales. To date, though, sales figures reported by TJX suggest that shoppers have not been put off by the breach.

TJX believes intruders stole the data via insecure wireless networks at two Marshalls stores in Miami.

An insecure wireless network. But not only that, such a network would have to be directly connected to internal databases that were also unfirewalled and weakly protected. Most security should have layers of protection, but it sounds like TJX had none of that.