TJX Companies might have failed to protect customers financial and personnel data.

Investigation and pending class action against The TJX Companies, Inc. TJX Companies failed to secure and protect the credit, debit, check and personal information of customers of its Marshalls, T.J. Maxx, HomeGoods, and A.J. Wright stores. TJX Companies had an "intrusion" into its computer systems that processes and stores information related to customer transactions, specifically, the portion of the TJX Companies system that handles credit card, debit card, check, and merchandise return transactions (including drivers' license and social security information). In addition, TJX Companies stored specific customer personal information on its computer systems, including drivers' license, military and state identification numbers, together with related names and addresses. To date, it appears that the breach involved customer information from at least 2002 to the end of 2006. TJX Companies did not make its customers, the general public, credit card companies, card processing entities or other financial institutions aware of the breach more than a month after it was discovered. It has been estimated that the breach involved as many as 45.7 million credit and debit cards. Several banks have reported fraud linked to card numbers used to make unauthorized purchases in the United States and overseas. Identity theft has also been reported by customers.