2022 IKEA Canada — employee search exposure, 95K customers

2022 95.0K records affected

Data compromised

Names, emails, phone numbers, postal codes, loyalty numbers

Technical writeup

Employee performed generic search on customer database (Mar 1–3); customer data exposed in results. Names, emails, phone numbers, postal codes, IKEA Family numbers. No financial data. Privacy Commissioner notified.

Root cause

Insider; improper database search

References

https://www.ctvnews.ca/toronto/article/ikea-canada-confirms-data-breach-involving-personal-information-of-approximately-95000-customers
https://databreaches.net/2022/05/07/ikea-canada-confirms-data-breach-involving-personal-information-of-approximately-95000-customers