boston.com Business your connection to The Boston Globe

Report on TJX breach expected today

How hackers stole data to be detailed

Two Canadian privacy agencies will present their findings on the TJX data theft at a conference in Montreal. Two Canadian privacy agencies will present their findings on the TJX data theft at a conference in Montreal. (Robert E. Klein for the Boston Globe/File 2007)

Two Canadian privacy agencies are expected to release today the results of a joint investigation into the security breach at TJX Cos. in which hackers stole more than 45.7 million credit and debit card numbers.

The Privacy Commissioner of Canada and the Information and Privacy Commissioner of Alberta are expected to summarize their findings into how intruders breached the computer system using wireless technology outside of a Marshalls store in the United States, according to privacy officials briefed on the report.

The Canadian groups report also includes recommendations for TJX to better protect its systems. The report is expected in Montreal on the opening day of the 29th International Conference of Data Protection and Privacy Commissioners.

The Framingham merchant could potentially seek a court injunction to block the release of the report this morning. TJX, which declined to comment, operates the Winners and HomeSense stores in Canada and is facing several other investigations, including ones by the US Federal Trade Commission and a multistate probe led by Massachusetts State Attorney General Martha Coakley. Officials from the FTC and Coakley's office would not provide details on their investigations.

The Canadian report comes just days after TJX reached a tentative settlement in a class-action lawsuit with customers who were victims of the largest security breach of personal data ever reported. The deal, which still requires court approval, would provide store vouchers to some people whose data were compromised and a three-day sale for all customers. TJX has said about 75 percent of the stolen cards were expired or had data in the magnetic strip masked.

Jenn Abelson can be reached at abelson@globe.com.

More from Boston.com

SEARCH THE ARCHIVES