Canadian Tire has disclosed a data breach affecting its online shopping database, exposing customer information tied to Canadian Tire, SportChek, Mark’s/L’Équipeur, and Party City accounts.

The company said on October 14 the breach was detected on October 2, 2025, when it found “unauthorized activity” in an e-commerce database. According to Canadian Tire, the hack was limited to that system and did not impact Canadian Tire Bank or Triangle Rewards data.

The exposed data includes names, addresses, emails, and years of birth, along with encrypted passwords and partial credit card numbers — the kind that appear on a store receipt. The retailer says the partial credit card info and encrypted passwords cannot be used to log into accounts or make purchases.

Fun. So this isn’t just Canadian Tire, it’s the e-commerce platform for the entire Triangle network that was breached.

[–] phoenixz@lemmy.ca 1 points 8 months ago (1 children)

It specifically says that triaglinwas NOT affected

[–] adespoton@lemmy.ca 1 points 8 months ago

It specifically says Triangle Rewards wasn’t affected; that’s separate from Triangle e-commerce, which includes the web stores for the listed companies.

[–] mintiefresh@piefed.ca 5 points 8 months ago

Well that sucks. At this point all of our information is randomly out there. It's really unfortunate.

[–] RodgeGrabTheCat@sh.itjust.works 4 points 8 months ago

This is why I tend to buy with cash, in person.

[–] Thedogdrinkscoffee@lemmy.ca 1 points 8 months ago (2 children)

If all data is encrypted, all breaches risk little to nothing. Who stores anything unencrypted these days.

[–] 5PACEBAR@lemmy.world 4 points 8 months ago

Encrypted on disk, yes, but if the data is accessed at the Software layer (which I'm willing to bet it is), it will definitely be unencrypted and usable.

[–] Jhex@lemmy.world 2 points 8 months ago

every company out there apparently