![Wanted: Suspect for Vandalism in the 5th District [VIDEO]](https://thephillypi.com/wp-content/uploads/2026/10/PHPD-Seeks-Public-Help-Identifying-Vandalism-Suspect-in-5th-District-330x220.jpg)
A data breach at Canadian Tire exposed personal data from over 38 million accounts, including contact details and encrypted passwords.
More than 38 million accounts were affected by an October 2025 data breach at Canadian retail giant Canadian Tire (CTC). The incident marks one of the largest retail data breaches in Canada, raising concerns about customer privacy and the security of sensitive personal information.
“On October 2, 2025, Canadian Tire Corporation (TSX: CTC) (TSX: CTC.A) (CTC or the Company) identified a data breach involving customer information in an e-commerce database.” reads the press release published by CTC. “There was no impact on in-store transactions, and all e-commerce systems are operational.”
On October 2, 2025, the company discovered a data breach affecting its e-commerce database. The incident exposed basic customer details, including names, addresses, emails, year of birth, encrypted passwords, and in some cases, truncated credit card numbers.
The company pointed out that exposed financial data cannot be used to access accounts, make transactions, or make purchases.
Less than 150,000 accounts also included full dates of birth. The breach did not impact Canadian Tire Bank, Triangle Rewards, or in-store systems. The company identified and fixed the issue and notified regulators.
The Canadian firm will contact affected users and will offer them credit monitoring.
EXPLORE MORE
THE DEAD MMORPG SURVIVOR: How Dragon Nest Transformed Fast-Paced Action Combat—And Why Fans Refuse to Let It Die
LOS ANGELES, CA — Long before modern action RPGs dominated mainstream gaming…
The 21st Century Propeller
History of Perfection The propeller has undergone a long transformation, evolving from…
Critical Debate Exposes Major Shapiro and Garrity Clashes Over Trump Policies
PHILADELPHIA — Pennsylvania political leaders recently took center stage as high-stakes policy…
Nation-state hack exploited hosting infrastructure to hijack Notepad++ updates
Notepad++ maintainer says nation-state attackers hijacked the app’s update system by redirecting…
Record-breaking 31.4 Tbps DDoS attack hits in November 2025, stopped by Cloudflare
AISURU/Kimwolf botnet hit a record 31.4 Tbps DDoS attack lasting 35 seconds…
Dr. Joyce Demands Immediate Action on Patients First Act During Heated House Hearing
Washington — In a recent high-stakes gathering before the House Energy and…
The data breach notification service Have I Been Pwned added the compromised records to its database. According to the platform, about 42 million records were exposed, including 38.3 million email addresses.
HIBP states that compromised data includes:
- Dates of birth
- Email addresses
- Genders
- Names
- Partial credit card data
- Passwords
- Phone numbers
- Physical addresses
HIBP reports that the datasets include PBKDF2 password hashes.
