Loblaw Notifies Two Million Canadians After Data Breach Exposed Personal Information
Loblaw Cos. Ltd. is informing approximately two million customers about a data breach that began around February 23, exposing personal details including names, addresses, and partial payment card information. The company has apologized and is offering two years of free credit monitoring through TransUnion.
Loblaw Cos. Ltd. is notifying approximately two million Canadian customers about a data breach detected in March. Unauthorized activity took place in certain Loblaw technology systems beginning around February 23.
The breach exposed a range of personal information. Hackers accessed private data including names, email addresses, home addresses, phone numbers, dates of birth, loyalty card numbers, certain purchase order details, and partial payment card information.
Loblaw CEO Per Bank apologized to impacted shoppers via email, stating, "We’re sorry for the concern this may cause."
In response to the incident, Loblaw conducted a detailed investigation, notified law enforcement and regulatory authorities, and strengthened its security systems. As a precautionary measure, customers were logged out of applications using PCiD credentials, including PC Optimum, PC Express, and the PC Financial portal.
To assist affected individuals, Loblaw is offering two years of complimentary credit monitoring and identity restoration services through TransUnion. Impacted shoppers have until February 28, 2027, to enroll in the free credit monitoring services.
Brampton, Ontario-based Loblaw operates about 2,500 stores nationwide under banners such as Loblaws, No Frills, Real Canadian Superstore, Zehrs, and Fortinos.