Given the size of the breach, if TJX can pay off the banks for only $41 million, it seems they'd be getting a very good deal, at least relative to their potential liability. After all, the cost for cancelling and reissuing 100 million cards is much, much greater than $41 million, something I wrote about at ephemerallaw.blogspot.com.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/636/2292#2292