TJX Companies (T.J. Maxx) card breach
Attackers led by Albert Gonzalez sniffed weakly-encrypted in-store Wi-Fi at a Marshalls outlet and pivoted to TJX's central systems, exfiltrating an estimated 94 million payment-card records over an 18-month intrusion — the largest U.S. retail data breach of its era.
- Victim
- The TJX Companies, Inc.
- Loss
- $256.0M
- Records
- 94.0M