TJX Companies
Disclosed Jan 17, 200719 years ago45,700,000 affectedSettled
Wireless network intrusion exposes 45.7 million payment cards at TJX
TJX disclosed an intrusion into systems handling card and return transactions and later reported in a regulatory filing that data from at least 45.7 million credit and debit cards was stolen. The FTC said attackers also obtained personal information on hundreds of thousands of people who returned goods without receipts.
What is known
| People affected | 45,700,000 (as reported by the organization) |
|---|---|
| Disclosed | Jan 17, 2007 |
| Discovered | Dec 2006 |
| Attack | Hacking |
| Data exposed | Payment cards, Government IDs, Names, Addresses |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | FTC consent order (2008); $9.75M settlement with 41 states (2009) (about $9.8M) |
Sources
| Source | |
|---|---|
| Privacy Rights Clearinghouse: Chronology of Data Breachesweb.archive.org · News | News |
| Agency Announces Settlement of Separate Actions Against Retailer TJX, and Data Brokers Reed Elsevier and Seisintftc.gov · Regulator | Regulator |
| T.J. Maxx theft believed largest hack evernbcnews.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 17, 2007 | 45,700,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.