2026 X-Copper — malware breach; driver's licences and traffic/criminal case files (Jun)
Data compromised
Names, dates of birth, email and postal addresses, driver's licence numbers, and legal matter details including offence details, trial dates, and case outcomes per customer notice; victim count not yet published
Technical writeup
Verified company notice — July 10, 2026. X-Copper Professional Corporation, an Ontario firm specializing in traffic-ticket and criminal-charge defence, told customers that around June 8, 2026 attackers used compromised credentials and malware against its systems. The firm said malware primarily restricted internal access but forensic evidence suggests an actor may have removed files containing personal information before encryption. Disclosed categories include names, dates of birth, email and postal addresses, driver's licence numbers, and legal-matter metadata such as offence details, trial dates, and case outcomes. X-Copper reported no evidence of misuse at notice time and had not published a victim count; external forensics remained ongoing. CityNews Toronto first reported the customer email July 10, 2026.
Root cause
Compromised credentials and malware; forensic evidence suggests files exfiltrated before encryption