In fact they were found to be deficient in 9 of the 12 requirements (Case Study: Operation Get Rich or Die Tryin’, n.d). In an analysis of the data breach by Mounica Vennamaneni, they found company was not just negligent in regards to PCI. There were multiple areas of failure, including, the employees level of awareness, the encryption used and even their logging procedures (Mounica Vennamaneni, 2016). Each of these failures is a lesson that, with any luck, TJX and others have taken to heart and taken steps to rectify.
Hacks of this nature do not just have an affect on the targets. Customers also bear some of the burden. Not all of the impacts will be clearly defined or immediately obvious. While credit card companies may reimburse a customer for their stolen money, they do not have the ability to pay for the time the customer spends trying to get their money back, the confidence lost in the security practices of corporations, and most importantly, the emotional impact of dealing with the