Loblaw Says Hackers Accessed Customers’ Basic Personal Information
Summary
Loblaw says a criminal third party accessed customer names, phone numbers, and email addresses through a contained part of its network. The company reports no evidence that financial, health, or password data was accessed.
Key points
- Loblaw says suspicious activity led it to discover unauthorized access to a contained, non-critical part of its IT network.
- The accessed customer information included names, phone numbers, and email addresses.
- The company reports no evidence so far that financial information, health information, or account passwords were compromised.
- Loblaw automatically logged customers out and recommends changing account passwords.
- PC Financial reportedly has not been affected.
- At the time of reporting, no threat actor had publicly claimed responsibility and no Loblaw data had been found advertised on underground forums.
Article Details
- Victim Organization
- Loblaw Companies Limited
- Incident Type
- Unauthorized network access and customer data breach
- Data Types Exposed
- Names
- Phone numbers
- Email addresses
- Operational Impact
- Loblaw automatically logged out all customers as a precaution; customers must log in again to access digital services.
- Ransom Or Extortion
- No threat actor had publicly claimed responsibility, and no Loblaw data was found advertised on underground forums at the time of reporting.
- Claim Status
- confirmed