Mark, although it's possible that the problem is TJMaxx, more likely it was from one of many databases where you used the card over the years and that DB was compromised (either from within or outside the company.) Either way, not a pleasant thought.