According to this AP story one of TJX's large shareholders is suing the company to get info about the large data loss it suffered. Arkansas Carpenters Pension Fund, which owns 4,500 shares of TJX stock, said it tried to get documents from TJX that would explain what measures the company took to secure its data but had no luck. So they've resorted to the lawsuit.
Last month the company revealed that the breach was more widespread than it initially thought. The company, which claims it discovered the breach in December 2006, initially said that thieves breached the system between May and December last year. But recently TJX disclosed that it appears there were breaches reaching all the way back to 2003 that went undetected. Authorities recently arrested a ring in Florida that was using credit and debit card info stolen from a TJX database to make purchases to the tune of about $8 million.
The shareholders are following the example of ChoicePoint shareholders, who filed a class-action suit against that company in 2005 following the company's breach disclosure -- which launched the era of breach disclosures.