Oregon Department of Justice

Oregon will receive $288,000 for playing a lead role in the $9.75 million multi-state settlement with the TJX Companies, the parent company of T.J. Maxx and Marshalls stores.

Attorney General John Kroger today announced a multi-state settlement with TJX Companies over a data breach that exposed an estimated 94 million credit and debit card numbers nationwide to hackers.

"Oregon consumers need to be confident that they can purchase goods without exposing their credit card numbers to hackers," Attorney General Kroger said.

The 41-state settlement involves what is believed to be the largest ever data breach by a merchant. Hackers intercepted an estimated 94 million credit and debit card numbers between 2005 and 2007.

Anyone in Oregon who used a credit or debit card to purchase goods from T.J. Maxx or Marshalls in that time frame could have been affected.

The settlement requires TJX to implement and maintain a comprehensive information security program. TJX also will report regularly to the Attorneys General. Under the agreement, TJX must:

• Upgrade all Wired Equivalency Privacy ("WEP') based wireless systems in TJX retail stores to wired systems or Wi-Fi Protected Access ("WPA") wired systems;
• Not store credit card or debit card data on its network any longer than necessary for legitimate business purposes;
• Appropriately segment from the rest of the TJX computer system those network-based portions of the TJX computer system that store, process or transmit personal information by firewalls, access controls, and other appropriate measures; and
• Implement proper security password management for portions of the TJX computer system that store, process or transmit personal information.

Oregon was a member of the multi-state executive committee that led the investigation.

Senior Assistant Attorney General Caren Rovics handled the case for the Oregon Department of Justice.

Attorney General John Kroger leads the Oregon Department of Justice. The Department's mission is to fight crime and fraud, protect the environment, improve child welfare, and defend the rights of all Oregonians.