BJ's Settles Data Protection Case

Share this article:
BJ's Wholesale Club agreed to implement new data security measures after millions in illegal purchases were made using credit and debit cards that consumers had used at BJ's stores, the Federal Trade Commission said yesterday.

Banks have reissued thousands of cards and filed lawsuits against BJ's that, as of May, amounted to $13 million in claims, according to the FTC. Under the settlement with the FTC, BJ's security must be inspected by an independent security outfit every other year for the next 20 years.

BJ's collected names, card numbers and expiration dates from cards used to make purchases at its stores, the FTC said. It then stored data for up to 30 days in violation of bank rules, allowed the data to be accessed with known default IDs and passwords, failed to encrypt the data when it was stored or transmitted and failed to prevent unauthorized wireless connections to its networks, according to the FTC.

Scott Hovanyetz covers telemarketing, production and printing and direct response TV marketing for DM News and To keep up with the latest developments in these areas, subscribe to our daily and weekly e-mail newsletters by visiting

Share this article:
You must be a registered member of Direct Marketing News to post a comment.

Sign up to our newsletters

Follow us on Twitter @dmnews

Latest Jobs:

More in News

Customer Centricity Is Spurring Marketing-Tech Investments

Customer Centricity Is Spurring Marketing-Tech Investments

A majority of marketers rank customer satisfaction improvements as paramount in the technology investment decisions.

Big, Bold Moves in the C-Suite

Big, Bold Moves in the C-Suite ...

JCPenney appoints Home Depot's Marvin Ellison as CEO; Harte Hanks and JWT add hitting power to their C-level benches

Campaign Comes to the States

Campaign Comes to the States

DMN's UK-based sister publication launches Campaign US

Copyright © 2014 Haymarket Media, Inc. All Rights Reserved
This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.
Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions.