Canadian Tire says customer information on e-commerce platform caught in data breach
Canadian Tire Corporation Ltd. says it has identified a data breach involving personal information belonging to customers that was stored in an e-commerce database.
The retailer says the breached information belonged to shoppers who had an e-commerce account with Canadian Tire or its other banners, SportChek, Marc/L’Equipère and Party City.
The data breached included names, addresses, emails and birth years, as well as encrypted passwords and, in some cases, incomplete credit card numbers.
Canadian Tire says the complete birth dates of about 150,000 account holders were also part of the breach.
The company says the information breached is not sufficient to access accounts and make purchases and that the incident has not impacted its ability to facilitate in-store transactions.
Canadian Tire says it has resolved the vulnerability identified on October 2 and is working with experts to enhance its security.