TJX settles with MasterCard over data breach
Framingham retailer TJX Cos. reached a settlement with MasterCard Inc. in which it will pay up to $24 million to banks and other institutions to cover fraud losses stemming from a massive data breach disclosed last year.
TJX, parent of discount retain chains including TJ Maxx and Marshalls, struck a similar deal with rival card network Visa in which it agreed to pay up to $40.9 million. As in that deal, TJX said the costs of its MasterCard settlement are included in the $256 million the company has set aside to pay for computer work and other costs associated with the breach.
TJX said the MasterCard settlement will be valid only if accepted by banks that issued 90 percent of the cards with fraud claims following the breach, which affected as many as 100 million card numbers, a record. In exchange banks would agree not to sue TJX or institutions that processed the charges at its stores.
The deal helps TJX wind down the episode, though it still faces court claims and just last week was criticized by the Federal Trade Commission over past security practices.
In a statement, TJX chief executive Carol Meyrowitz said: “We believe this settlement agreement provides a fair resolution for MasterCard and its issuing banks and look forward to a high level of issuer acceptance. Providing a secure shopping environment for our customers remains a priority for TJX. Beyond the many millions of dollars we have spent to add significant security to our computer system, we are installing security measures which exceed those of many other retailers and current industry requirements.”
(By Ross Kerber, Globe staff)
For previous Globe coverage of the TJX data breach, click here.