← TJ Maxx

2007 TJ Maxx — 94M cards, largest retail breach at time

2007 94.0M records affected Share on X

Data compromised

Credit and debit card numbers, expiration dates

Technical writeup

TJ Maxx (TK Maxx in UK) suffered what was then the largest retail data breach in history. Attackers exploited weak Wi-Fi security to access the network and install malware that captured payment card data. Approximately 94 million credit and debit cards were compromised over 18 months.

Root cause

Weak Wi-Fi security; WEP encryption; malware

References