The alleged mastermind behind the major data breaches at TJX Cos. Inc. and Heartland Payment Systems Inc. has pleaded guilty to some of the charges against him.

Albert Gonzalez pleaded guilty Friday in Massachusetts, where TJX is based, to 20 counts of conspiracy, computer fraud, wire fraud and other charges for his role in the breaches at TJX, Dave & Buster's Inc. and some other companies, according to an announcement from the Department of Justice.

The guilty plea does not address charges pending against Gonzalez in New Jersey, where Heartland is based, for his alleged role in the breach at the payment processor and other companies mentioned in an August indictment brought against him in that state. Gonzalez faces 15 to 25 years in prison for the crimes covered in the Massachusetts plea as well as potential fines and the forfeiture of millions of dollars in cash and personal property.

Subscribe Now

Access to authoritative analysis and perspective and our data-driven report series.

14-Day Free Trial

No credit card required. Complete access to articles, breaking news and industry data.