New England Banks File Class Action Suit Against Retailer TJXThe line forms on the left, as state banking associations representing banks from three New England states have filed a class action lawsuit against TJX Companies Inc., in response to the companyâ€™s credit and debit card breach in which more than 45 million cards may have been compromised. More banks are expected to join the lawsuit.
The class action lawsuit, filed on April 23 in the U.S. District Court in Boston, MA against the Framingham, MA â€“based retailer seeks to recover damages in the â€œtens of millions of dollars.â€ Three state banking associations, the Massachusetts Bankers Association (MBA), the Connecticut Bankers Association (CBA) and the Maine Association of Community Banks (MACB) filed the suit and are co-plaintiffs. Collectively, they represent nearly 300 banks.
So far â€œnamedâ€ plaintiffs in the class action suit include Saugusbank, Saugus, MA; Eagle Bank, Everett, MA; and Collinsville Savings Society, Collinsville, CT. More bankers associations and many more individual banks are expected to join the list from across the country as the case progresses. As a result of the TJX data breach, first disclosed in mid January, financial institutions have spent tremendous amounts of money in the effort to protect cardholders. The MBA said it is filing this lawsuit to protect customer privacy and data security for customer accounts.
â€œThe MBA made a decision to file a class action suit because we believe we are in the best position to achieve success for our members and customers,â€ said Daniel J. Forte, president and CEO of the MBA. â€œWith the possible exception of the banks from California that could also decide to join us, our New England institutions have had the most exposure to this massive data breach. We believe TJX has more stores in our region than anywhere else other than California and, of course, it is headquartered here in Massachusetts. Moreover, we have extensive knowledge and experience with Massachusetts state law, which will likely be an important factor in this litigation.â€ Recently, TJX reported that cards and other personal information may have been exposed going all the way back to 2003. Cases of fraud due to the TJX breach have been reported from all over the world.
At the time that the MBA is filing this lawsuit, banks throughout New England continue to receive lists of â€œhotâ€ cards that have been exposed in the TJX data breach, more than three months after TJX first disclosed it had a problem. Forte said the MBA and the other plaintiffs are not ready to discuss the full extent of the bank losses because the damage is still being done. â€œSuffice to say,â€ he said, â€œwe will be seeking to recover damages in the tens of millions of dollars.â€ Financial institutions across the nation had to re-issue debit cards as a result of the TJX data breach. Preliminary estimates of the costs vary from institution to institution, up to $25 dollars per card. This alone would run into many millions of dollars for banks throughout the country. When fraud occurs, banks generally cover the entire fraud, replacing money in customer accounts to protect their customers.
"Protecting consumers is our number one priority" said Lindsey Pinkham, senior vice president of the Connecticut Bankers Association. "However, retail data breaches are getting larger and more frequent and we cannot continue to absorb the costs."
The MBAâ€™s Forte also said he has great confidence this lawsuit will achieve success even though lawsuits brought by other banks as a result of a similar breach by BJâ€™s Wholesale Club several years ago have achieved mixed results. â€œThere are significant differences between this case and prior data breach lawsuits such as the BJâ€™s cases in Pennsylvania,â€ he said. â€œWe think we have an advantage trying the case here in Massachusetts; when the BJâ€™s cases were argued in Pennsylvania, the plaintiffs did not include an unfair trade practices statutory claim, and Massachusetts law allows these claims.
Forte pointed to the fact that â€œan unfair trade practice claim was asserted by the FTC which imposed substantial conditions and requirements on their operations. In addition, we will seek to prove that TJX is responsible for negligent misrepresentation. Among other things, the company represented that it was safeguarding and disposing of cardholder data. These representations were not true and showed a lack of reasonable care and were both unfair trade practices and negligent misrepresentation under Massachusetts law. In one of the ongoing BJâ€™s cases, unlike in Pennsylvania, a motion to dismiss brought by BJâ€™s was denied in Massachusetts and the case is still proceeding here.
â€œWe believe the litigation ultimately will serve to better protect consumers,â€ he added. â€œIf weâ€™re successful against TJX, the nationâ€™s major retailers will finally wake up to the fact that not protecting consumer data is an unfair trade practice and that investment in data management systems to protect consumers and shield consumers against fraud and identity theft is required.â€