|
Retail Paradox Weekly
An RPW Special Breaking Report
October 24, 2007
Just When You Thought it was Safe
By Steve Rowen, Partner
10/24/2007
The number of customers whose personal information was stolen in the TJX case has doubled.
Previously, TJX reported that 45.7 million customer credit cards had been compromised: a court filing by bank plaintiffs alleged this week that the number of accounts compromised is now in excess of 94 million.
The new numbers reflect 65 million Visa accounts and approximately 29 million MasterCard numbers.
TJX has already settled with its customers' class action suit, but the impending suits by merchant and acquiring banks have always been most interesting - and dangerous. At a potential $25 replacement fee per card, this is where the real pain for TJX has always lurked. Now that potential for pain is two-fold. More...
Did You Know...? Early Findings from This Year's Customer Data Security Benchmark Study
By Brian Kilcourse, Managing Partner
10/24/2007
Early findings from the 2007-2008 Customer Data Security Benchmark indicate that PCI compliance is a relative thing. Although 50% of our early respondents indicate that they are "fully compliant" with PCI mandates, only 32% have completed wall-to-wall audits of their technology environment to identify where personal data is held (see figure 1).
In an earlier case study report regarding PCI Compliance projects, RSR analyst Steve Rowen noted, "...a word of warning from our Winners: there is no magical 'one' solution that brings a company into compliance. Since most retailers have a mix of legacy and package applications in their application portfolio spanning many technology 'generations,' each exchange of sensitive data between applications and technologies must be examined for compliance. This starts with the origin of much of the sensitive data - the store level point of sale system, which is often the oldest and most proprietary application in a companys portfolio." More...
You received this email because you have contacted RSR or registered to receive newsletters and nofitifcations from RSR. If you no longer wish to subscribe, please follow the "manage subscription" link below.
Copyright 2007 RSR Research LLC. RSR is a tradename of Retail Systems Research LLC. All Rights Reserved.
|