TJX Companies, Inc.

In March 2008, TJX Companies agreed to settle Federal Trade Commission charges that it failed to provide reasonable and appropriate security for sensitive consumer information. The FTC action followed a major data-security breach and alleged deficiencies in TJX's practices for protecting personal information. The settlement required TJX to establish and maintain a comprehensive information-security program and obtain independent third-party security assessments every other year for 20 years. Source: Federal Trade Commission https://search.ftc.gov/news-events/news/press-releases/2008/03/agency-announces-settlement-separate-actions-against-retailer-tjx-data-brokers-reed-elsevier-seisint