TJX customers to claim eligibility for breach settlement

TJX has begun distributing claims forms to customers whose information may have been compromised in the retail chain's massive data breach.

The notices, which went out Friday, explain how eligible individuals can apply for benefits under an agreement reached in September that settled a number of class-action lawsuits brought on by customers of the Framingham, Mass.-based discount retailer.

The settlement, which is still awaiting July 15 court approval, ruled that customers who used credit cards during the time of the intrusion and who suffered costs related to the breach will receive store vouchers valued at $30 to $80. TJX said some 45.7 million records were compromised in the breach, but credit card companies have listed that number closer to 100 million.

In addition, TJX, operator of hundreds of Marshall's and T.J. Maxx stores, also announced plans to hold a future three-day sale during which prices will be reduced by 15 percent for all customers.

TJX also agreed to offer three years of credit monitoring to some 455,000 people who returned merchandise to stores without a receipt and who had to provide their driver's license numbers, thus increasing the chances of identity theft.

"We believe the proposed settlement of the customer class actions offers an excellent resolution for our customers, addressing the different ways that they have told us that they have been impacted by the computer intrusion," TJX President and Chief Executive Officer Carol Meyrowitz said in a Friday letter to customers posted on the company's website.



More in News

22M accounts exposed in Yahoo Japan breach

Users have been urged to change their passwords as a precaution.

Espionage hacking campaign "Operation Hangover" originates in India

Researchers at security firm Norman on Monday, building on earlier analysis from ESET, publicized a new attack infrastructure that is conducting national security and industrial espionage on targets across the world.

Operators again revive Pushdo botnet, use a popular tactic to stay hidden

Operators again revive Pushdo botnet, use a popular ...

Botnet operators are using a domain-generation algorithm to conceal their command-and-control center. And once they knew security researchers were on to their tricks, they got even slicker.