Canadian Tire says under 150,000 customers affected by data breach

Canadian Tire has confirmed that the personal information of some customers was impacted in a data breach.

The retailer notes that it discovered a vulnerability in one of its e-commerce databases on October 2. The database stores data of those with online accounts with Canadian Tire, as well as the affiliated brands SportChek, Mark’s/L’Équipeur and Party City. The compromised information includes names, addresses, emails, birth years and encrypted passwords, as well as, in some cases, incomplete credit card numbers. Canadian Tire also says that full birth dates for “fewer than” 150,000 account holders were leaked, although it’s unclear where in the broad range the actual number falls.

Canadian Tire says it has identified affected account holders and will contact them in the coming days to notify them and offer credit monitoring. It also says it has reported the breach to the relevant privacy regulators.

Despite all of that, the retailer is stressing that the breach didn’t provide enough information for any bad actors to access accounts and make purchases. It also notes that the incident doesn’t affect any in-store transactions, Canadian Tire Bank information or Triangle Rewards loyalty data.

Image credit: Shutterstock

Source: Canadian Tire