credit card

The TJX case still keeps me busy, and I just came about this Wall Street Journal reprint. It is well worth a reading, as it taps into the details.

An auditor pointed to the lousy security in september 2006:

"The auditor told the company last Sept. 29 that it wasn't complying with many of the requirements imposed by Visa and MasterCard, according to a person familiar with the report. The auditor's report cited the outmoded WEP encryption and missing software patches and firewalls. "

According to attorney Eric J. Sinrod over at Techrepublic, TJX have spent US$12mill. for costs incured after the security breech. That is in addition to US$3 prior to the fourth quarter.

And - that is in addition to brand value, possible lawsuits, and security investments.  I wonder what the price of securing TJX before the event would have been? Any ideas?