Final Draft for Final Post: Albert Gonzalez – T.J Maxx

          It is so much easier to pay with a credit/debit card.  Most of us have one, or a few of them. A lot of people don’t like to carry cash with them anymore, and if you need cash, you can easily find an ATM close by, since there are so many around. We also love shopping, and a lot of us use our credit/debit cards to pay for the items we purchase. In order to obtain a Credit/Debit card you have to provide your name, address, social security number, among other personal information to the Bank. So since it’s your personal information, wouldn't you want Companies to protect it when you use your Credit/Debit card to purchase items from them? I would like them to keep my information secure, I hope you would too. But unfortunately when it comes to information security, not all companies and industries are alike.  

Albert Gonzalez was accused of masterminding the combined credit card theft and subsequent reselling of more than 170 million cards and ATM numbers from 2005 through 2007. The biggest such fraud in history. He stole card information from TJX Companies like T.J Maxx, BJ’s Wholesale Club, DSW, Office Max, Boston Market, Barnes & Nobles, and Sports Authority. He hacked stores in different states like New York, Massachusetts, and New Jersey. Gonzalez was arrested on May 7, 2008 and On March 25, 2010, he was sentenced to 20 years in federal prison.

I believe that Albert Gonzalez actions were wrong, and he is guilty as charged, but I have to ask, do you think Albert Gonzalez was the only one at fault? Many would say yes, he is, but I would argue the opposite.

One of the Companies he hacked was T.JX Companies, T.J Maxx and Marshals s are clothing store owned by T.JX that sells designer clothes for a discounted price. Therefor a lot of customers walk in to theirs stores and purchase their items. I am not talking about a Mommy and Daddy owned store, I am talking about a very big company that is making a very good amount of money. But surprisingly they were using out of date and vulnerable security encryption for their machines and networks. I believe that if a person uses their Credit/Debit card at a store for instance, it is the store’s responsibility to keep the information safe. Once I swipe my card thought your credit machine, my card information is stored, so it becomes your property. Probably more than 90% of the customers affected were not aware that their Credit/Debit card information was compromised.

So I ask, why weren't they protecting their costumer’s private information with up to date security? T.JX was using WEP security encryption for their network. Almost every hacker out there likes a challenge, but when the security is outdated and weak is like a day at the park for them. I believed that T.JX should have done a better job at securing their networks and customers information.

Sources:

http://businessinsights.bitdefender.com/information-security-industry-differences

http://news.cnet.com/T.J.-Maxx-hack-exposes-consumer-data/2100-1029_3-6151017.html

http://www.wired.com/2010/03/tjx-sentencing/