2026 Loblaw — customer data breach (non-critical network)
Data compromised
Names, phone numbers, email addresses
Technical writeup
Loblaw Companies disclosed a data breach on March 10, 2026 after detecting suspicious activity on a non-critical part of its IT network. Criminal third party accessed basic customer information: names, phone numbers, email addresses. Passwords, health data, credit card information, and PC Financial accounts were not compromised. Company automatically logged out all customers; required sign-in to access PC Optimum and digital services.
Root cause
Unauthorized access; suspicious activity on network