Before TJX revealed that its servers had been breached by hackers, the retail giant collected and stored unnecessary and excessive amounts of personal information for too long and relied on outdated encryption technology to defend the data, according to a report released today by Canadian privacy officials.