TX Maxx battling online card fraud

Discount retailer TK Maxx is battling against card fraud with consumer credit card numbers obtained from its online sales. Rob Cotton, chief executive of NCC Group, an information-security specialist, said: "A lot of TK Maxx card records have been sold on these sites." He named four sites that act as "an eBay for hackers", allowing criminals to buy and sell stolen card details.

Cotton said the US Federal Bureau of Investigation, and other authorities, were constantly trying to shut down such sites, which are often hosted in legally "difficult" countries such as Russia, China or Indonesia. TJX, the American owner of TK Maxx, announced on Thursday that an extended security breach over many months had allowed hackers to steal 45.7m credit-card numbers at the UK clothing stores in 2003 and 2004. It is believed to be the largest theft of its kind. Cotton said that similar thefts often went undisclosed. "Security is regularly breached," he said, "and organised crime is behind it."