Interviews
News Flash
New Jersey AG enters into multi-state settlement with TJX Companies
24 Jun '09
4 min read
The settlement announced today reflects lessons learned from that investigation, and requires TJX to implement an Information Security Program designed to guard against future intrusions or unauthorized disclosures.
Among other things, the Information Security Program must:
• Upgrade all Wired Equivalency Privacy (“WEP') based wireless systems in TJX retail stores to wired systems or Wi-Fi Protected Access (“WPA”) wired systems;
• Not store credit card or debit card data on its network, any longer than necessary for legitimate business purposes;
• Appropriately isolate from the rest of the TJX computer system those network-based portions of the TJX computer system that store, process or transmit personal information, by firewalls, access controls, and other appropriate measures; and
• Implement proper security password management for portions of the TJX computer system that store, process or transmit personal information.
In addition to New Jersey, the following states participated in the settlement: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Florida, Hawaii, Idaho, Illinois, Iowa, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Dakota, Tennessee, Texas, Vermont, Washington, West Virginia, Wisconsin and the District of Columbia.
Along with Attorney General Milgram, others participating in the TJX Executive Committee included Attorneys General from Arkansas, California, Connecticut, Florida, Illinois, Ohio, Oregon, Pennsylvania, Tennessee and Vermont.
Deputy Attorney General Alina Wells, assigned to the Division of Law's Consumer Fraud Prosecution Section, handled the TJX matter on behalf of the state.
Among other things, the Information Security Program must:
• Upgrade all Wired Equivalency Privacy (“WEP') based wireless systems in TJX retail stores to wired systems or Wi-Fi Protected Access (“WPA”) wired systems;
• Not store credit card or debit card data on its network, any longer than necessary for legitimate business purposes;
• Appropriately isolate from the rest of the TJX computer system those network-based portions of the TJX computer system that store, process or transmit personal information, by firewalls, access controls, and other appropriate measures; and
• Implement proper security password management for portions of the TJX computer system that store, process or transmit personal information.
In addition to New Jersey, the following states participated in the settlement: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Florida, Hawaii, Idaho, Illinois, Iowa, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Dakota, Tennessee, Texas, Vermont, Washington, West Virginia, Wisconsin and the District of Columbia.
Along with Attorney General Milgram, others participating in the TJX Executive Committee included Attorneys General from Arkansas, California, Connecticut, Florida, Illinois, Ohio, Oregon, Pennsylvania, Tennessee and Vermont.
Deputy Attorney General Alina Wells, assigned to the Division of Law's Consumer Fraud Prosecution Section, handled the TJX matter on behalf of the state.
State of New Jersey
Popular News
Leave your Comments
Esteemed Clients
-Ltd..jpg?tr=w-120,h-60,c-at_max,cm-pad_resize,bg-ffffff "Thermore (Far East) Ltd.")
.jpg?tr=w-120,h-60,c-at_max,cm-pad_resize,bg-ffffff "Telangana State Industrial Infrastructure Corporation Limited (TSllC Ltd)")
.jpg?tr=w-120,h-60,c-at_max,cm-pad_resize,bg-ffffff "Taiwan Textile Federation (TTF)")
