Canadian Tire Corporation announced a data breach affecting e-commerce customer information on October 2.
The company stated that the unauthorized activity was limited to the e-commerce database, which did not include Canadian Tire Bank information or Triangle Rewards loyalty data.
The database contained basic personal information for customers who have an e-commerce account with one or more of Canadian Tire, SportChek, Mark’s/L’Équipeur and Party City. This included name, address, email, and year of birth. It also included encrypted passwords and, in some cases, truncated credit card information.
The company has resolved the vulnerability and is working with external experts to enhance related protections. In-store transactions were not affected, and all e-commerce systems are operational.
Canadian Tire Corporation announces data breach affecting e-commerce customer information, with basic personal info and encrypted passwords compromised.