Canadian Tire data breach affects over 38 million accounts

As reported by Security Affairs, Canadian Tire Corporation disclosed a significant data breach impacting its e-commerce platform, compromising personal information for over 38 million customer accounts. The incident, first identified on October 2, 2025, is one of the largest retail data breaches in Canada.

The breach exposed customer details including names, addresses, email addresses, dates of birth, and encrypted passwords. While encrypted passwords and truncated credit card numbers were compromised, Canadian Tire stated that the exposed financial data cannot be used for transactions. Less than 150,000 accounts had their full dates of birth exposed.

The incident did not affect in-store systems, Canadian Tire Bank, or Triangle Rewards. The company has since fixed the vulnerability and notified regulatory bodies. Canadian Tire plans to notify affected customers and offer credit monitoring services.

Source: Security Affairs