We are the leading off-price retailer of apparel and home
fashions in the United States and worldwide. Our T.J. Maxx,
Marshalls and A.J. Wright chains in the United States, our
Winners chain in Canada, and our T.K. Maxx chain in Europe sell
off-price family apparel and home fashions. Our HomeGoods chain
in the United States and our HomeSense chain, operated by
Winners in Canada, sell off-price home fashions. The target
customer for all of our off-price chains, except A.J. Wright, is
the middle-to upper-middle income shopper, with the same profile
as a department or specialty store customer. A.J. Wright targets
the moderate-income customer. Our seven off-price chains are
synergistic in their philosophies and operating platforms. Our
eighth chain, Bobs Stores, was acquired in December 2003
and is a value-oriented, branded apparel chain based in the
Northeastern United States that offers casual, family apparel.
Bobs Stores target customer demographic spans the
moderate-to upper-middle income bracket.
Our off-price mission is to deliver an exciting, fresh and
rapidly changing assortment of brand-name merchandise at
excellent values to our customers. We define value as the
combination of quality, brand, fashion and price. With over 450
buyers and over 10,000 vendors worldwide and over 2,400 stores,
we believe we are well positioned to continue accomplishing this
goal. Our key strengths include:
expertise in off-price buying
substantial buying power
synergistic businesses with flexible business models
solid relationships with many manufacturers and other
merchandise suppliers
deep organization with decades of experience in off-price
retailing as well as other forms of retailing
inventory management systems and distribution networks specific
to our off-price business model
financial strength and excellent credit rating
As an off-price retailer, we offer quality, name brand and
designer family apparel and home fashions every day at
substantial savings to comparable department and specialty store
regular prices. We can offer these everyday savings as a result
of our opportunistic buying strategies, disciplined inventory
management, including rapid inventory turns, and low expense
structure.
In our off-price chains, we purchase the majority of our
inventory opportunistically. In contrast to traditional
retailers that order goods far in advance of the time they
appear on the selling floor, TJX buyers are in the marketplace
virtually every week, buying primarily for the current selling
season. By maintaining a liquid inventory position, our buyers
can buy close to need, enabling them to buy into current market
trends and take advantage of the opportunities in the
marketplace. Due to the unpredictable nature of consumer demand
in the highly fragmented apparel and home fashions marketplace
and the mismatch of supply and demand, we are regularly able to
buy the vast majority of our inventory directly from
manufacturers, with some merchandise coming from other retailers
and other sources. We purchase virtually all of our inventory
for our off-price stores at discounts from initial wholesale
prices. Although we generally purchase merchandise for our
off-price chains to sell in the current season, we purchase a
limited quantity of pack away merchandise that we buy
specifically to warehouse and sell in a future selling season.
We are willing to purchase less than a full assortment of styles
and sizes. We pay promptly and do not ask for typical retail
concessions in our off-price chains such as advertising,
promotional and markdown allowances, or delivery concessions
such as drop shipments to stores or delayed deliveries or return
privileges. Our financial strength, strong reputation and
ability to purchase large quantities of merchandise and sell it
through our geographically diverse network of stores provide us
excellent access to leading branded merchandise. Our
opportunistic buying permits us to consistently offer our
customers in our off-price chains a rapidly changing merchandise
assortment at everyday values that are below department and
specialty store regular prices.
We are extremely disciplined in our inventory management, and we
rapidly turn the inventory in our off-price chains. We rely
heavily on sophisticated, internally developed inventory systems
and controls that permit a virtually continuous flow of
merchandise into our stores and an expansive distribution
infrastructure that supports our
close-to-need
buying by delivering goods to our stores quickly and
efficiently. For example, highly automated storage and
distribution systems track, allocate and deliver an average of
approximately 11,000 items per week to each T.J. Maxx and
Marshalls store. In addition, specialized computer inventory
planning, purchasing and monitoring systems,
2
coupled with warehouse storage, processing, handling and
shipping systems, permit a continuous evaluation and rapid
replenishment of store inventory. Pricing, markdown decisions
and store inventory replenishment requirements are determined
centrally, using information provided by
point-of-sale
computer terminals and are designed to move inventory through
our stores in a timely and disciplined manner. These inventory
management and distribution systems allow us to achieve rapid
in-store inventory turnover on a vast array of product and sell
substantially all merchandise within targeted selling periods.
We operate with a low cost structure relative to many other
retailers. Our stores are generally located in community
shopping centers. While we seek to provide a pleasant, easy
shopping environment with emphasis on customer convenience, we
do not spend heavily on store fixtures. Our selling floor space
is flexible, without walls between departments and largely free
of permanent fixtures, so we can easily expand and contract
departments in response to customer demand and available
merchandise. Also, our large retail presence, strong financial
position and expertise in the real estate market allow us
generally to obtain favorable lease terms. In our off-price
chains, our advertising budget as a percentage of sales remains
low compared to traditional department and specialty stores,
although we increased our advertising and other marketing
spending in fiscal 2007 as compared to prior years. Our high
sales-per-square-foot
productivity and rapid inventory turnover also provide expense
efficiencies.
With all of our off-price chains operating with the same
off-price strategies and systems, we are able to capitalize upon
expertise, best practices and new ideas across our chains,
develop associates by transferring them from one chain to
another, and grow our various businesses more efficiently and
effectively.
During the fiscal year ended January 27, 2007, we derived
78% of our sales from the United States (28% from the Northeast,
14% from the Midwest, 23% from the South, and 13% from the
West), 21% from foreign countries (10% from Canada, 11% from
Europe (the United Kingdom and Ireland)), and 1% from Puerto
Rico. By merchandise category, we derived approximately 63% of
our sales from apparel (including footwear), 25% from home
fashions and 12% from jewelry and accessories.
We consider each of our operating divisions to be a segment. The
T.J. Maxx and Marshalls store chains are managed as one
division, referred to as Marmaxx, and are reported as a single
segment. The Winners and HomeSense chains, which operate
exclusively in Canada, are also managed as one division and are
reported as a single segment. Each of our other store chains,
T.K. Maxx, HomeGoods, A.J. Wright, and Bobs Stores is
operated as a division and reported as a separate segment. More
detailed information about our segments, including financial
information for each of the last three fiscal years, can be
found in Note O to the consolidated financial statements.
Unless otherwise indicated, all store information is as of
January 27, 2007, and references to store square footage
are to gross square feet. Fiscal 2005 means the fiscal year
ended January 29, 2005, fiscal 2006 means the fiscal year
ended January 28, 2006, fiscal 2007 means the fiscal year
ended January 27, 2007 and fiscal 2008 means the fiscal
year ending January 26, 2008.
SEGMENT OVERVIEW
Marmaxx (T.J. Maxx and Marshalls)
Marmaxx operates both the T.J. Maxx and Marshalls store chains.
T.J. Maxx is the largest off-price retail chain in the United
States, with 821 stores in 48 states at fiscal 2007 year
end. Marshalls is the second-largest off-price retailer in the
United States, with 734 stores in 42 states, as well as 14
stores in Puerto Rico, at that date. We maintain the separate
identities of the T.J. Maxx and Marshalls stores through product
assortment and merchandising, marketing and store appearance.
This encourages our customers to shop at both chains.
T.J. Maxx and Marshalls primarily target female shoppers who
have families with middle to upper-middle incomes and who
generally fit the profile of a department or specialty store
customer. These chains operate with a common buying and
merchandising organization and have a consolidated
administrative function, including finance and human resources.
The combined organization, known internally as The Marmaxx
Group, offers us increased leverage to purchase merchandise at
favorable prices and allows us to operate with a lower cost
structure. These advantages are key to our ability to sell
quality, brand name merchandise at substantial discounts from
department and specialty store regular prices.
T.J. Maxx and Marshalls sell quality, brand name and designer
merchandise at prices generally 20%-60% below department and
specialty store regular prices. Both chains offer family
apparel, accessories, giftware, and home
3
fashions. Within these broad categories, T.J. Maxx offers a shoe
assortment for women and fine jewelry, while Marshalls offers a
full-line footwear department and a larger mens
department. In fiscal 2007, T.J. Maxx substantially completed
the roll out of the expanded jewelry and accessories departments
to existing stores and Marshalls continued to add expanded
footwear departments. We believe these expanded offerings
further differentiate the shopping experience at T.J. Maxx and
Marshalls, driving traffic to both chains. We expect to add
approximately 200 expanded footwear departments in the Marshalls
stores in fiscal 2008, and at T.J. Maxx, we will continue to add
expanded jewelry and accessories departments in new stores,
relocated stores and selectively, to existing stores.
T.J. Maxx and Marshalls stores are generally located in suburban
community shopping centers. T.J. Maxx stores average
approximately 30,000 square feet. Marshalls stores average
approximately 32,000 square feet. We currently expect to add a
net of 50 stores in fiscal 2008. Ultimately, we believe that
T.J. Maxx and Marshalls together can operate approximately 1,800
stores in the United States and Puerto Rico.
HomeGoods
HomeGoods is our off-price retail chain that sells exclusively
home fashions with a broad array of giftware, home basics,
accent furniture, lamps, rugs, accessories, childrens
furniture, and seasonal merchandise for the home. Many of the
HomeGoods stores are stand-alone stores; however, we also
combine HomeGoods stores with a T.J. Maxx or Marshalls store in
a superstore format, the majority of which are dual-branded,
with both the T.J. Maxx or Marshalls logo and the HomeGoods
logo. We count the superstores as both a T.J. Maxx or Marshalls
store and a HomeGoods store. In fiscal 2007, we continued to
open a different superstore format, called a combo
store, in which a HomeGoods store is located beside a T.J.
Maxx or Marshalls store, with interior passageways providing
access between the stores. This configuration is also
dual-branded with both the T.J. Maxx or Marshalls logo and the
HomeGoods logo.
Stand-alone HomeGoods stores average approximately 27,000 square
feet. In superstores, which average approximately 53,000 square
feet, we dedicate an average of 22,000 square feet to HomeGoods.
The 270 stores open at the end of fiscal 2007 include 147
stand-alone stores, 105 superstores and 18 combo stores. In
fiscal 2008, we plan to net 12 additional stores, including
1 superstore. We believe that the U.S. market could potentially
support approximately 500 to 600 HomeGoods stores in the long
term.
Winners and HomeSense
Winners is the leading off-price retailer in Canada, offering
off-price brand name and designer womens apparel,
lingerie, accessories, home fashions, giftware, fine jewelry,
menswear, childrens clothing, and family footwear. Winners
operates HomeSense, our Canadian off-price home-fashions chain,
launched in fiscal 2001. Like our HomeGoods chain, HomeSense
offers a wide and rapidly changing assortment of off-price home
fashions including giftware, accent furniture, lamps, rugs,
accessories and seasonal merchandise. We operate HomeSense in a
stand-alone format, as well as a superstore format where a
HomeSense store and a Winners store are combined or operate
side-by-side.
At fiscal 2007 year end, we operated 184 Winners stores,
which averaged approximately 29,000 square feet and
68 HomeSense stores, which averaged approximately 24,000
square feet. We expect to add a net of 4 Winners stores and
3 HomeSense stores in fiscal 2008, in both the stand-alone
and superstore format. Ultimately, we believe the Canadian
market can support approximately 200 Winners stores and
approximately 80 HomeSense stores.
T.K. Maxx
T.K. Maxx, operating in the United Kingdom and Ireland, is the
only major off-price retailer in any European country. T.K. Maxx
utilizes the same off-price strategies employed by T.J. Maxx,
Marshalls and Winners, and offers the same types of merchandise.
At the end of fiscal 2007, we operated 210 T.K. Maxx stores
which averaged approximately 30,000 square feet. We expect to
add a total of 10 stores in the United Kingdom and Ireland in
fiscal 2008 and believe that the U.K. and Ireland can support
approximately 275 stores in the long term. In addition, in the
fall of fiscal 2008, we expect to open 5 T.K. Maxx stores in
Germany.
A.J. Wright
A.J. Wright offers our off-price concept to the moderate income
customer demographic, which differentiates this chain from our
other off-price divisions. A.J. Wright stores offer brand-name
family apparel, accessories, footwear, domestics, gift ware,
including toys and games, and special, opportunistic purchases.
A.J. Wright stores average approximately 26,000 square feet. We
operated 129 A.J. Wright stores in the United States at fiscal
2007 year end.
4
During the fourth quarter of fiscal 2007, we identified 34
underperforming stores to close, as part of a plan to reposition
A.J. Wright for future profitable growth. Virtually all of these
stores were closed at the end of fiscal 2007. The cost to close
these stores as well as the operating income or loss of these
stores (in the current and prior periods) has been reported in
our financial statements as a discontinued operation. In fiscal
2008, we anticipate opening 5 stores in existing markets as we
focus on improving performance, both in our existing store base
and in opening new stores. In the long term, we believe that the
U.S. could potentially support approximately 1,000 A.J. Wright
stores.
Bobs Stores
Bobs Stores, acquired in late 2003, offers casual, family
apparel and footwear, including workwear, activewear, and
licensed team apparel. Bobs Stores customer
demographics span the moderate to upper-middle income bracket.
Bobs Stores operated 36 stores at the end of fiscal 2007,
with an average size of 45,000 square feet. We do not plan to
open any new stores for this division in fiscal 2008 as we
continue to evaluate this business and focus on improving
performance.
5
STORE LOCATIONS
We operated stores in the following locations as of
January 27, 2007:
T.J. Maxx*
Marshalls*
HomeGoods*
A. J. Wright
Bobs Stores
Alabama
16
6
2
-
-
Arizona
9
11
4
-
-
Arkansas
7
-
1
-
-
California
67
102
29
7
-
Colorado
11
8
2
-
-
Connecticut
25
23
10
5
13
Delaware
3
3
1
-
-
District of Columbia
1
-
-
1
-
Florida
55
59
23
2
-
Georgia
31
28
8
-
-
Idaho
5
1
1
-
-
Illinois
37
40
13
17
-
Indiana
17
10
1
8
-
Iowa
6
2
-
-
-
Kansas
6
3
1
-
-
Kentucky
9
4
3
2
-
Louisiana
7
9
-
-
-
Maine
7
3
3
-
-
Maryland
11
21
6
6
-
Massachusetts
47
48
21
18
12
Michigan
33
20
9
8
-
Minnesota
13
12
8
-
-
Mississippi
5
2
-
-
-
Missouri
13
12
6
-
-
Montana
3
-
-
-
-
Nebraska
3
2
-
-
-
Nevada
5
6
3
-
-
New Hampshire
14
9
5
1
3
New Jersey
31
39
21
6
4
New Mexico
3
2
-
-
-
New York
47
54
19
17
3
North Carolina
25
19
8
-
-
North Dakota
3
-
-
-
-
Ohio
38
16
9
9
-
Oklahoma
3
3
-
-
-
Oregon
7
4
1
-
-
Pennsylvania
40
30
8
7
-
Puerto Rico
-
14
7
-
-
Rhode Island
5
6
4
2
1
South Carolina
18
9
4
-
-
South Dakota
1
-
-
-
-
Tennessee
24
12
6
3
-
Texas
36
55
6
-
-
Utah
9
-
2
-
-
Vermont
4
1
1
-
-
Virginia
29
23
7
8
-
Washington
13
8
-
-
-
West Virginia
3
2
1
-
-
Wisconsin
15
7
6
2
-
Wyoming
1
-
-
-
-
Total Stores
821
748
270
129
36
Winners operated 184 stores in Canada (including the Winners
portion of a superstore): 22 in Alberta, 24 in British Columbia,
6 in Manitoba, 3 in New Brunswick, 2 in Newfoundland, 6 in Nova
Scotia, 85 in Ontario, 1 on Prince Edward Island, 32 in Quebec
and 3 in Saskatchewan.
HomeSense operated 68 stores in Canada (including the HomeSense
portion of a superstore): 8 in Alberta, 12 in British Columbia,
1 in Manitoba, 2 in New Brunswick, 2 in Nova Scotia, 35 in
Ontario and 8 in Quebec.
T.K. Maxx operated 202 stores in the United Kingdom and 8 stores
in the Republic of Ireland.
*
Includes T.J. Maxx, Marshalls or HomeGoods portion of a
superstore.
6
COMPUTER INTRUSION
We suffered an unauthorized intrusion into portions of our
computer systems that process and store information related to
customer transactions that we believe resulted in the theft of
customer data. We do not know who took this action and whether
there were one or more intruders involved (we refer to the
intruder or intruders collectively as the Intruder),
or whether there was one continuing intrusion or multiple,
separate intrusions (we refer to the intrusion or intrusions
collectively as the Computer Intrusion). We are
engaged in an ongoing investigation of the Computer Intrusion,
and the information provided in this
Form 10-K
is based on the information we have learned in our investigation
to the date of this
Form 10-K.
We do not know what, if any, additional information we will
learn in our investigation, but that information could
materially add to or change the information provided in this
Form 10-K.
Discovery of Computer Intrusion.
On
December 18, 2006, we learned of suspicious software on our
computer systems. We immediately initiated an investigation, and
the next day, General Dynamics Corporation and International
Business Machines Corporation, leading computer security and
incident response firms, were engaged to assist in the
investigation. They determined on December 21, 2006 that
there was strong reason to believe that our computer systems had
been intruded upon and that an Intruder remained on our computer
systems. With the assistance of our investigation team, we
immediately began to design and implement a plan to monitor and
contain the ongoing Computer Intrusion, protect customer data
and strengthen the security of our computer systems against the
ongoing Computer Intrusion and possible future attacks.
On December 22, 2006, we notified law enforcement officials
of the suspected Computer Intrusion and later that day met with
representatives of the U.S. Department of Justice,
U.S. Secret Service and U.S. Attorney, Boston Office
to brief them. At that meeting, the U.S. Secret Service
advised us that disclosure of the suspected Computer Intrusion
might impede their criminal investigation and requested that we
maintain the confidentiality of the suspected Computer Intrusion
until law enforcement determined that disclosure would no longer
compromise the investigation.
With the assent of law enforcement, on December 26 and
December 27, 2006, we notified our contracting banks and
credit and debit card and check processing companies of the
suspected Computer Intrusion (we refer to credit and debit cards
as payment cards). On December 27, 2006, we
first determined that customer information had apparently been
stolen from our computer systems in the Computer Intrusion. On
January 3, 2007, we, together with the U.S. Secret
Service, met with our contracting banks and payment card and
check processing companies to discuss the Computer Intrusion.
Prior to the public release of information with respect to the
Computer Intrusion, we provided information on the Computer
Intrusion to the U.S. Federal Trade Commission,
U.S. Securities & Exchange Commission, Royal
Canadian Mounted Police and Canadian Federal Privacy
Commissioner. Upon the public release, we also provided
information to the Massachusetts and other state Attorneys
General, California Office of Privacy Protection, various
Canadian Provincial Privacy Commissioners, the U.K. Information
Commissioner, and the Metropolitan Police in London, England.
On January 13, 2007, we determined that additional customer
information had apparently been stolen from our computer systems.
On January 17, 2007, we publicly announced the Computer
Intrusion and thereafter we expanded our forensic investigation
of the Computer Intrusion.
On February 18, 2007, in the course of our ongoing
investigation, we found evidence that the Computer Intrusion may
have been initiated earlier than previously reported and that
additional customer information potentially had been stolen. On
February 21, 2007, we publicly announced additional
findings on the timing and scope of the Computer Intrusion.
Timing of Computer Intrusion.
Based on our
investigation to date, we believe that our computer systems were
first accessed by an unauthorized Intruder in July 2005, on
subsequent dates in 2005 and from mid-May 2006 to mid-January
2007, but that no customer data were stolen after
December 18, 2006.
Systems Affected in the Computer Intrusion.
We
believe that information was stolen in the Computer Intrusion
from a portion of our computer systems in Framingham, MA that
processes and stores information related to payment card, check
and unreceipted merchandise return transactions for customers of
our T.J. Maxx, Marshalls, HomeGoods and A.J. Wright stores in
the U.S. and Puerto Rico and our Winners and HomeSense stores in
Canada (Framingham
7
system) and from a portion of our computer systems in
Watford, U.K. that processes and stores information related to
payment card transactions at T.K. Maxx in the United Kingdom and
Ireland (Watford system). We do not believe that the
Computer Intrusion affected the portions of our computer systems
handling transactions for customers of Bobs Stores, or
check and merchandise return transactions at T.K. Maxx. We do
not believe that customer personal identification numbers (PINs)
were compromised, because, before storage on the Framingham
system, they are separately encrypted in U.S., Puerto Rican and
Canadian stores at the PIN pad, and because we do not store PINs
on the Watford system. We do not believe that information from
transactions using debit cards issued by Canadian banks at
Winners and HomeSense that were transacted through the Interac
network was compromised. Although we believe that information
from transactions at our U.S. stores (other than Bobs
Stores) using Canadian debit cards that were transacted through
the NYCE network were processed and stored on the Framingham
system, we do not believe the PINs required to use these
Canadian debit cards were compromised in the Computer Intrusion.
We do not process or store names or addresses on the Framingham
system in connection with payment card or check transactions.
Customer Information Believed Stolen.
We have
sought to identify customer information stolen in the Computer
Intrusion. To date, we have been able to identify only some of
the information that we believe was stolen. Prior to discovery
of the Computer Intrusion, we deleted in the ordinary course of
business the contents of many files that we now believe were
stolen. In addition, the technology used by the Intruder has, to
date, made it impossible for us to determine the contents of
most of the files we believe were stolen in 2006. Given the
scale and geographic scope of our business and computer systems
and the time frames involved in the Computer Intrusion, our
investigation has required a substantial period of time to date
and is not completed. We are continuing to try to identify
information stolen in the Computer Intrusion through our
investigation, but, other than the information provided below,
we believe that we may never be able to identify much of the
information believed stolen.
Based on our investigation, we have been able to determine some
details about information processed and stored on the Framingham
system and the Watford system. Customer names and addresses were
not included with the payment card data believed stolen for any
period, because we do not process or store that information on
the Framingham system or Watford system in connection with
payment card transactions. In addition, for transactions after
September 2, 2003, we generally no longer stored on our
Framingham system the security data included in the magnetic
stripe on payment cards required for card present transactions
(track 2 data), because those data generally were
masked (meaning permanently deleted and replaced with
asterisks). Also, by April 3, 2006, our Framingham system
generally also masked payment card PINs, some other portions of
payment card transaction information, and some portions of check
transaction information. For transactions after April 7,
2004 our Framingham system also generally began encrypting
(meaning substituted characters for the actual characters using
an encryption algorithm provided by our software vendor) all
payment card and check transaction information. With respect to
the Watford system, masking and encryption practices were
generally implemented at various points in time for various
portions of the payment card data.
Until discovery of the Computer Intrusion, we stored certain
customer personal information on our Framingham system that we
received in connection with returns of merchandise without
receipts and in some check transactions in our U.S., Puerto
Rican and Canadian stores (other than Bobs Stores). In
some cases, this personal information included drivers
license, military and state identification numbers (referred to
as personal ID numbers), together with related names
and addresses, and in some of those cases, we believe those
personal ID numbers were the same as the customers social
security numbers. After April 7, 2004, we generally
encrypted this personal information when stored on our
Framingham system. We do not process or store information
relating to check or merchandise return transactions or customer
personal information on the Watford system.
Information Believed Stolen in 2005.
As we
previously publicly reported, we believe customer data were
stolen in September and November 2005 relating to a portion of
the payment card transactions made at our stores in the U.S.,
Puerto Rico and Canada (excluding transactions at Bobs
Stores and transactions made at Winners and HomeSense through
the Interac network with debit cards issued by Canadian banks)
during the period from December 31, 2002 through
June 28, 2004. We suspect the data believed stolen in 2005
related to somewhere between approximately half to substantially
all of the transactions at U.S., Puerto Rican and Canadian
stores during the period from December 31, 2002 through
June 28, 2004 (excluding transactions at Bobs Stores
and transactions made at Winners and HomeSense through the
Interac network with debit cards issued by Canadian banks). The
data were included in files routinely created on our Framingham
system to store customer data, but the contents of many of the
files were deleted in the ordinary course of business prior to
discovery of the Computer Intrusion. Through our investigation
to date, we have
8
identified the information set forth in the following chart with
respect to the approximate number of payment cards for which
information is believed to have been stolen in this period:
Transaction Period
4/8/04 6/28/04
Card Data
12/31/02 11/23/03
11/24/03 4/7/04
Encrypted and
Track 2 Data
Track 2 Data
Track 2 Data
Payment Card Status at
Masked
All Card
Masked
All Card
Masked
All Card
Time of Believed Theft
(Not Stored)
Data Clear
(Not Stored)
Data Clear
(Not Stored)
Data Clear
(in thousands)
Cards Expired
5,600
25,000
Number
Unknown
(1
)
None
Number
Unknown
(1
)
None
Cards Unexpired
3,800
11,200
Number
Unknown
(1
)
None
Number
Unknown
(1
)
None
(1)
Substantially all stolen data from
these periods were deleted in the ordinary course of business
subsequent to the believed theft but prior to discovery of
Computer Intrusion. We have not sought to decrypt encrypted data
that was not deleted.
Customer names and addresses and, for transactions after
September 2, 2003, track 2 data were not included in the
payment card information believed stolen in 2005. We do not
believe that customer PINs were compromised.
In addition, we believe that personal information provided in
connection with a portion of the unreceipted merchandise return
transactions at T.J. Maxx, Marshalls, and HomeGoods stores in
the U.S. and Puerto Rico, primarily during the last four months
of 2003 and May and June 2004, was also stolen in 2005. The
information we are able to specifically identify was from 2003
and included personal ID numbers, together with the related
names
and/or
addresses, of approximately 451,000 individuals. We are in the
process of notifying these individuals directly by letter.
Information Believed Stolen in 2006.
As
previously publicly reported, we identified a limited number of
payment cards as to which transaction information was included
in the customer data that we believe were stolen in 2006. This
information was contained in two files apparently created in
connection with computer systems problems in 2004 and 2006.
Through our investigation to date, we have identified the
following information with respect to the approximate number of
payment cards for which unencrypted information was included in
these files:
Track 2 Data
Card Status at Date of
Masked
All Card
Believed Theft
(Not Stored)
Data Clear
(in thousands)
Cards Expired
23
85
Cards Unexpired
20
4
Customer names and addresses were not included with the payment
card information in these files. We do not believe that customer
PINs were compromised. Some of the payment card data contained
in these files were encrypted; we have not sought to decrypt
these data.
In addition, the two files contained the personal ID numbers,
together with the related names
and/or
addresses, of approximately 3,600 individuals, and we sent
notice directly to these individuals.
We also have located a third file created in the ordinary course
that we believe was stolen by the Intruder in 2006 and that we
believe contained customer data. All of the data in this file
are encrypted, and we have not sought to decrypt them.
As previously publicly reported, we believe that in 2006 the
Intruder may also have stolen from our Framingham system
additional payment card, check and unreceipted merchandise
return information for transactions made in our stores in the
U.S., Canada, and Puerto Rico (excluding transactions at
Bobs Stores and transactions made at Winners and HomeSense
through the Interac network with debit cards issued by Canadian
banks) during portions of mid-May through December 18,
2006. Through our investigation, we have identified
approximately 100 files that we believe the Intruder, during
this period, stole from our Framingham system (the vast majority
of which we believe the Intruder created) and that we suspect
included customer data. However, due to the technology utilized
by the Intruder, we are unable to determine the nature or extent
of information included in these files. Despite our masking and
encryption practices on our Framingham system in 2006, the
technology utilized in the Computer Intrusion during 2006 could
have enabled the Intruder to steal payment card data from our
Framingham system during the payment card issuers approval
process, in which data (including the track 2 data) is
transmitted to payment card issuers without encryption.
Further, we believe that the Intruder had access to the
decryption tool for the encryption software utilized by TJX. The
9
approximately 100 files stolen in 2006 could have included the
data that we believe were stolen in 2005, as well as other data
relative to some customer transactions from December 31,
2002 through mid-May 2006, although, with respect to
transactions after September 2, 2003 generally without
track 2 data, and, with respect to transactions after
April 7, 2004, generally with all data encrypted.
In addition, as previously publicly reported, we suspect that
customer data for payment card transactions at T.K. Maxx stores
in the U.K. and Ireland has been stolen. In that regard, we now
believe that at least two files of the approximately 100 files
identified above that the Intruder stole from the Framingham
system in 2006 were created by the Intruder and moved from the
Watford system to the Framingham system. We suspect that these
files contained payment card transaction data, some or all of
which could have been unencrypted and unmasked. However, due to
the technology utilized by the Intruder in the Computer
Intrusion, we are unable to determine the nature or extent of
information included in these files. Further, the technology
utilized by the Intruder in the Computer Intrusion during 2006
on the Watford system could also have enabled the Intruder to
steal payment card data from the Watford system during the
payment card issuers approval process, in which data
(including the track 2 data) are transmitted to payment card
issuers without encryption.
We have provided extensive payment card transaction information
to the banks and payment card companies with which we contract
as requested by them. While we have been advised by law
enforcement authorities that they are investigating fraudulent
use of payment card information believed stolen from TJX, we do
not know the extent of any fraudulent use of such information.
Some banks and payment card companies have advised us that they
have found what they consider to be preliminary evidence of
possible fraudulent use of payment card information that may
have been stolen from us, but they have not shared with us the
details of their preliminary findings. We also do not know the
extent of any fraudulent use of any of the personal information
believed stolen. Certain banks have sought, and other banks and
payment card companies may seek, either directly against us or
through claims against our acquiring banks as to which we may
have an indemnity obligation, payment of or reimbursement for
fraudulent card charges and operating expenses (such as costs of
replacing
and/or
monitoring payment cards thought by them to have been placed at
risk by the Computer Intrusion) that they believe they have
incurred by reason of the Computer Intrusion. In addition,
payment card companies and associations may seek to impose fines
by reason of the Computer Intrusion.
Financial Costs.
In the fourth quarter of
fiscal 2007, we recorded a pre-tax charge of approximately
$5 million, or $.01 per share, for costs incurred
through the fourth quarter in connection with the Computer
Intrusion, which includes costs incurred to investigate and
contain the Computer Intrusion, strengthen computer security and
systems, and communicate with customers, as well as technical,
legal, and other fees. Beyond this charge, we do not have enough
information to reasonably estimate losses we may incur arising
from the Computer Intrusion. Various litigation has been or may
be filed, and various claims have been or may be otherwise
asserted, against us
and/or
our
acquiring banks, on behalf of customers, banks,
and/or
card
companies seeking damages allegedly arising out of the Computer
Intrusion and other related relief. We intend to defend such
litigation and claims vigorously, although we cannot predict the
outcome of such litigation and claims. Various governmental
entities are investigating the Computer Intrusion, and although
we are cooperating in such investigations, we may be subject to
fines or other obligations. (See Item 3 with respect to
litigation and investigations.) Losses that we may incur as a
result of the Computer Intrusion include losses arising out of
claims by payment card associations and banks, customers,
shareholders, governmental entities and others; technical,
legal, computer systems and other expenses; and other potential
liabilities, costs and expenses. Such losses could be material
to our results of operation and financial condition.
Future Actions.
We are continuing our forensic
investigation of the Computer Intrusion and our ongoing program
to strengthen and protect our computer systems. We are
continuing to communicate with our customers about the Computer
Intrusion. We are continuing to cooperate with law enforcement
in its investigation of these crimes and with the payment card
companies and associations and our acquiring banks. We are also
continuing to cooperate with governmental agencies in their
investigations of the Computer Intrusion. We are vigorously
defending the litigation and claims asserted against us with
respect to the Computer Intrusion.
OTHER
INFORMATION
Employees
At January 27, 2007, we had approximately 125,000
employees, many of whom work less than 40 hours per week. In
addition, we hire temporary employees during the peak
back-to-school
and holiday seasons.
10
Credit
Our stores operate primarily on a
cash-and-carry
basis. Each chain accepts credit sales through programs offered
by banks and others. We do not operate our own customer credit
card program or maintain customer credit receivables. Our
co-branded TJX card program for our domestic divisions offered
by a major bank expired February 1, 2007, as scheduled. We
plan to offer a new co-branded TJX credit card program with a
different major bank in fiscal 2008. The rewards program
associated with these programs is partially funded by TJX.
Buying and Distribution
We operate a centralized buying organization that services both
the T.J. Maxx and Marshalls chains, while each of our other
chains has its own centralized buying organization. All of our
chains are serviced through their own distribution networks
which includes the use of third party providers at our HomeGoods
division.
Trademarks
Our principal trademarks and service marks, which are T.J. Maxx,
Marshalls, HomeGoods, Winners, HomeSense, T.K. Maxx, A.J. Wright
and Bobs Stores, are registered in relevant countries. Our
rights in these trademarks and service marks endure for as long
as they are used.
Seasonality
Our business is subject to seasonal influences, which causes us
generally to realize higher levels of sales and income in the
second half of the year. This is common in the apparel retail
business.
Competition
The retail apparel and home fashion business is highly
competitive. We compete on the basis of fashion, quality, price,
value, merchandise selection and freshness, brand name
recognition and, to a lesser degree, store location. We compete
with local, regional, national and international department,
specialty, off-price, discount and outlet stores as well as
other retailers that sell apparel, home fashions and other
merchandise that we sell, whether in stores, through catalogues
or media or over the internet. We purchase most of our inventory
opportunistically and compete for that merchandise with other
off-price apparel and outlet retailers. We also compete with
other retailers for store locations.