T.J. Maxx, And Marshalls
94 Million Records Breached
In 2007, TJX, parent company of discount stores T.J. Maxx and Marshalls, disclosed that thieves had stolen information on possibly tens of millions of credit and debit cards. The company first thought its systems had been compromised for about eight months, but it turned out the vulnerability might have lasted for almost a year longer than that. The incident wound up costing TJX millions of dollars paid to the FTC, credit card companies, banks, and consumers. Oh, and 11 hackers were eventually arrested for the break-in.
Source: Jake Widman - Informationweek