TJXs profits are starting to crumble under the weight of the massive data breach announced in January that placed about 45.7 million customers at risk for identity theft, according to a filing this week with the U.S. Securities and Exchange Commission.
The filing reveals that the Framingham, Mass.-based discount retail chain’s net income sharply fell in this year’s second quarter compared to the same period last year, from $138 million to $59 million – a drop of more than 57 percent.
The freefall primarily was due to an after-tax second-quarter charge of $118 million related to the breach. The amount is comprised of $11 million for costs incurred during the quarter and $107 million in reserve funds to be used in the future for "probable losses," according to the filing.
"We have continued to learn more about the computer intrusion and are now able to estimate the company’s liability," Carol Meyrowitz, president and chief executive officer, said in a statement Tuesday.
Some experts, however, contend TJX will end up paying much more.
In fact, TJX may spend in the $500 million range to deal with the breach fallout, Mary Monahan, a partner at Javelin Strategy & Research, told SC Magazine.com today. Much of the cost is expected to come from litigation fees and government fines, she said."The amount they've set aside [$107 million], I don't think that's the end," she said.
Meanwhile, net sales at the company, the parent of Marshall’s and T.J. Maxx, modestly rose from $3.9 billion in 2006’s May-to-July period to $4.3 billion in the same period this year, the filing said. TJX reported a similar rise in the first quarter, when sales increased six percent to $4.1 billion.
"Over the past months, we have worked diligently to further strengthen the security of our computer systems," Meyrowitz said. "Our customers remain our top priority, and I sincerely thank them for their support during this time."
The jump in sales may surprise some, especially after an April Javelin study that showed 77 percent of consumers intended to stop shopping at merchants that incurred a data breach. But TJX may be an anomaly because it controls the discount clothing market share."I think in a TJX situation, there's not a lot of competition," said Monahan, who led the study that polled 1,200 U.S. debit and credit card users. "There's not a lot of other places to shop that are similar to a T.J. Maxx or Marshall's. If you're going to have to travel 50 miles to shop at a place like that, consumers are going to react in a way that makes sense for their pocketbooks."
A Ponemon Institute study last year showed that breaches cost companies an average of $182 per lost customer record, resulting in a total average expenditure of $4.8 million. But the TJX event, in which wireless hackers spent many months secretly scouring the company’s database, was one of the most reported data-loss incidents of all time.
So far, authorities have busted at least one criminal gang for buying stolen TJX records. The intruders have not been caught.
Click here to email reporter Dan Kaplan.