ShinyHunters leaked 600,000+ Canada Goose customer records, though the company insists its systems were not breached.
Data extortion group ShinyHunters has published over 600,000 Canada Goose customer records on its data leak site. Canada Goose is a Canadian luxury outerwear company best known for high‑end, cold‑weather jackets and parkas. Founded in 1957 and headquartered in Toronto, it has grown into a global fashion brand selling premium apparel through its own stores and wholesale partners worldwide.
The company, however, states that it did not suffer a security breach.
Canada Goose told BleepingComputer that the leaked data seems tied to past customer transactions.
“At this time, we have no indication of any breach of our own systems. We are currently reviewing the newly released dataset to assess its accuracy and scope and will take any further steps as may be appropriate.” the firm told BleepingComputer. “To be clear, our review shows no evidence that unmasked financial data was involved. Canada Goose remains committed to protecting customer information.”
EXPLORE MORE
US punished Colombia’s outgoing leader for calling Gaza war ‘genocide’
Washington’s sanctions against Gustavo Petro and its worsening ties with Bogota had…
Scientists call for world’s population to be cut in half despite warnings of demographic collapse
A study published last week calls for the earth’s population to halve…
Inside Abby Hornacek’s World: The FOX Nation Host on Adventure, Family, and Chasing Her Passions
Whether she’s sandboarding down massive dunes, touring iconic sports stadiums, or interviewing…
Darline Graham unsure about total abortion ban: ‘Let me think about it’
Darline Graham Nordone, the sister and replacement of the late longtime Republican…
Poorly crafted phishing campaign leverages bogus security incident report
Attackers used a fake PDF incident report hosted on AWS to scare…
ShinyHunters announced on its Tor data leak site the leak of 1.67 GB of data allegedly stolen from Canada Goose, including over 600K customer records. Leaked data includes order info, including names, emails, addresses, partial card data, device/browser info, and purchase history. BleepingComputer confirmed the leaked data includes partial card details, such as card brand, last four digits, some BIN numbers, and payment authorization metadata.
The company is investigating the claims to determine the number of customers that may be affected and notify them.
Recently, the cybercrime group ShinyHunters claimed responsibility for the Figure breach on its dark web site, saying Figure refused to pay a ransom and releasing about 2.5GB of stolen data.
Blockchain-based lending firm Figure confirmed a data breach after an employee fell victim to a social engineering attack. According to a company spokesperson, the incident allowed hackers to access and steal a limited number of files. The company disclosed the breach following inquiries and is assessing the impact.
Figure Technology Solutions, Inc. is a US financial technology company. Established in 2018, it develops and operates blockchain-based platforms used in lending, capital markets, and asset management.
The company offers consumer and institutional lending products such as HELOCs, cash-out refinancing, DSCR loans, crypto-backed loans, and operates the Figure Connect credit marketplace.
