2026 Phishing breach — 750K Canadian investors (August 2025 incident)
Data compromised
Dates of birth, phone numbers, income, social insurance numbers, government IDs, investment account numbers and statements
Technical writeup
CIRO (Canadian Investment Regulatory Organization) suffered a sophisticated phishing attack identified August 11, 2025. Approximately 750,000 Canadian investors affected along with member firm registration data. Notification letters began January 14, 2026. Forensic investigation exceeded 9,000 hours. Two years free credit monitoring offered.
Root cause
Sophisticated phishing attack