Canadian Tire Corporation Ltd. has confirmed a data breach involving customer personal information stored in an e-commerce database. The affected individuals are customers who had accounts with Canadian Tire, SportChek, Mark’s/L’Equipeur, and Party City. The compromised data includes names, addresses, emails, birth years, encrypted passwords, and incomplete credit card numbers in some instances. Moreover, approximately 150,000 account holders had their full birth dates exposed in the breach.
Canadian Tire reassures that the breached information is insufficient to access accounts for unauthorized purchases, and there was no impact on its in-store transaction operations. The company has addressed the vulnerability identified on October 2 and is collaborating with security experts to bolster its security measures.