TJX Companies

Disclosed Jan 17, 200745,700,000 affectedSettled

Wireless network intrusion exposes 45.7 million payment cards at TJX

TJX disclosed an intrusion into systems handling card and return transactions and later reported in a regulatory filing that data from at least 45.7 million credit and debit cards was stolen. The FTC said attackers also obtained personal information on hundreds of thousands of people who returned goods without receipts.

What is known

People affected	45,700,000 (as reported by the organization)
Disclosed	Jan 17, 2007
Discovered	Dec 2006
Attack	Hacking
Data exposed	Payment cardsGovernment IDsNamesAddresses
Sector	Retail · US
Status	Settled
Lawsuit or fine	FTC consent order (2008); $9.75M settlement with 41 states (2009) (about $9.8M)

Sources

Newsweb.archive.org

Privacy Rights Clearinghouse: Chronology of Data Breaches

Regulatorftc.gov

Agency Announces Settlement of Separate Actions Against Retailer TJX, and Data Brokers Reed Elsevier and Seisint

Newsnbcnews.com

T.J. Maxx theft believed largest hack ever

Notices filed

TotalJan 17, 2007

Research45,700,000 people

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about TJX Companies