Canadian Tire Corp. Ltd. says it has identified a data breach involving personal information belonging to customers, which was stored in an e-commerce database.
The retailer says the leaked information pertains to shoppers who had an e-commerce account with Canadian Tire or its other brands, SportChek, Mark’s/L’Equipeur and Party City.
The leaked data included names, addresses, emails and birth years, as well as encrypted passwords and, in some cases, incomplete credit card numbers.
Canadian Tire says the full birth dates of about 150,000 account holders were also part of the breach.
The company says the leaked information is not enough to access accounts and make purchases and that the incident did not impact its ability to facilitate in-store transactions.
Canadian Tire says it has resolved the vulnerability it identified on October 2 and is working with experts to improve its security.
