TJX was cited for not having an active monitoring process for storing sensitive data. The problem is not just the data, but the amounts being kept, says Amichai Shulman, an expert on Payment Card Industry (PCI) Data Security Standard. “There will always be holes in the environment where hackers or insiders can exploit data,” says Neray. “A lot more they could be doing to get control of their data,” Neray says of TJX’s lack of compliance.”]
Source: https://www.cuinfosecurity.com/tjx-lesson-pci-compliance-might-stop-data-breaches-a-586