Loblaw notifies about two million Canadians over March data breach

Loblaw has begun notifying about two million Canadians affected by a data breach in March, giving them specifics about which personal information of theirs leaked. The grocer is contacting affected consumers directly, saying the extent of the leak is different for everyone and not all types of information were involved for every customer.

The information potentially revealed includes names, email addresses, home addresses, dates of birth, loyalty card numbers, certain purchase order details and partial payment card information. Loblaw is also advising customers on next steps and asking them to beware of unexpected emails, calls or texts.

It is offering complimentary credit monitoring and identity restoration services through TransUnion. The company said in March that it detected suspicious activity on its IT network and determined an unauthorised third party had accessed some basic customer information, but it did not disclose how many customers were affected at the time.

Loblaw said it conducted a detailed investigation, notified law enforcement and regulatory authorities, and strengthened its security systems.