TJX NYSE Security breach

The TJX Companies

TJX disclosed an intrusion into systems processing customer transactions after investigators found that payment-card data had been stolen.

1 month vs SPY -6.3 pp Below SPY

-4.4% TJX vs +1.9% SPY

DisclosureJan 17, 2007 · time unknown
Company’s roleDirect victim
Available data12 months complete
Share typeCommon stock · TJX

This site shows how share prices moved after an incident became public. It does not prove that the incident caused the move. Company news, sector moves and the wider market can affect every result. Educational only — not investment advice.

Disclosure timing

When could the market react?

The baseline is the last adjusted close before the news was public. The reaction session is the first close afterward.

  1. 01Baseline sessionJan 16, 2007

    Normalized to 100 for both TJX and SPY.

  2. 02Public disclosureJan 17, 2007 · time unknown

    Publication time is not documented; lower timing precision.

  3. 03First reaction closeJan 17, 2007

    -0.7% company total return versus +0.0% for SPY; -0.8 pp market-relative return.

Disclosure time is unknown; the previous session close is used as baseline.

Time windows

Company vs SPY

Each row uses the last trading session on or before its target date. “Market-relative” is the company return minus the SPY return, in percentage points.

Returns measured from the shared baseline session
WindowEndpointTJXSPYMarket-relativeSignal
First reaction Jan 17, 2007 -0.7% +0.0% -0.8 pp Below SPY
+7 days Jan 24, 2007 +0.6% +0.7% -0.1 pp Below SPY
+1 month Feb 16, 2007 -4.4% +1.9% -6.3 pp Below SPY
+3 months Apr 17, 2007 -4.9% +3.3% -8.2 pp Below SPY
+6 months Jul 17, 2007 -0.2% +9.1% -9.3 pp Below SPY
+12 months Jan 17, 2008 -1.5% -4.9% +3.4 pp Above SPY
Compare with current catalog aggregates
WindowThis caseCatalog medianCatalog meann
First reaction-0.8 pp-0.8 pp-1.5 pp30
+7 days-0.1 pp-2.0 pp-4.0 pp30
+1 month-6.3 pp-6.6 pp-6.8 pp30
+3 months-8.2 pp-5.1 pp-6.6 pp30
+6 months-9.3 pp-5.6 pp-7.5 pp30
+12 months+3.4 pp-3.7 pp-10.1 pp30

Normalized total return

TJX compared with SPY

Baseline session = 100. Adjusted close reflects splits and reinvested distributions.

The TJX Companies had -1.5% company total return versus -4.9% for SPY; +3.4 pp market-relative return. The chart shows normalized adjusted-close performance for up to 24 months.

View tabular chart fallback
Representative normalized chart points, sampled approximately monthly
DateTJXSPY
Jan 16, 2007100.0100.0
Feb 14, 200796.1101.9
Mar 16, 200787.797.3
Apr 17, 200795.1103.3
May 16, 200793.1106.5
Jun 15, 200796.6108.0
Jul 17, 200799.8109.1
Aug 15, 200796.399.5
Sep 14, 2007104.2105.0
Oct 15, 2007101.3109.8
Nov 13, 2007103.2104.9
Dec 13, 2007100.7105.6
Jan 15, 200896.198.4
Feb 14, 2008101.796.3
Mar 17, 2008108.591.4
Apr 16, 2008106.298.0
May 15, 2008109.3102.0
Jun 16, 2008114.097.5
Jul 16, 2008116.589.2
Aug 14, 2008123.493.2
Sep 15, 2008113.886.4
Oct 14, 200892.972.3
Nov 12, 200874.862.1
Dec 12, 200868.164.4
Jan 14, 200967.361.6
Jan 16, 200971.062.1

Price recovery

Recovered

Here, recovery only means that adjusted close reached the baseline again. It does not mean every effect of the incident ended.

State
Recovered
Initial trough
-1.2% on Jan 18, 2007
Recovery close
Jan 19, 2007
Calendar days
2
Observation cap
24 months after disclosure

Hypothetical $1,000

What would $1,000 have looked like?

Compare $1,000 in TJX with $1,000 in SPY, bought and measured on the same dates.

TJX value $989 The TJX Companies
SPY value $1,087 US market benchmark
Difference vs SPY -$98 Observed result

Entry Jan 22, 2007 Exit Jul 20, 2007

Uses fractional shares and adjusted close. Leaves out taxes, fees and slippage. The holding period starts on the purchase date. This is a historical illustration, not an investment strategy.

Case note

TJX said it had found unauthorized access to systems that processed and stored customer transaction information. Its investigation concluded that customer data had been stolen over an extended period, with activity dating back to 2005.

The case enters the sample because it was a direct issuer breach with a documented public-disclosure date, large consumer exposure and material legal and regulatory follow-up. The analysis begins with the last market close before the date-only disclosure.

Evidence

Sources and case review

We qualify each case before checking its price results. These links support the disclosure date, listing, incident and business impact.

  1. primary Mar 28, 2007
    TJX fiscal 2007 Form 10-K — Computer Intrusion The TJX Companies / U.S. SEC Supports: Disclosure, Listing, Impact, Description
  2. Listing evidenceChecked Jul 20, 2026
    TJX fiscal 2007 Form 10-K U.S. Securities and Exchange Commission The event-period filing identifies TJX as the listed issuer and documents its January 17 public announcement.

Why it is included. The issuer directly suffered a large payment-data intrusion, publicly documented the disclosure date, and described regulatory, litigation and consumer consequences before any market-return review. Reviewed Jul 20, 2026.