Loblaw says March data breach affected about two million Canadians

BRAMPTON — Loblaw says it is starting to notify two million Canadians who were affected by a data breach in March with specifics which personal information of theirs leaked.

The grocer is notifying affected consumers directly the breach, which may have revealed data including their name, email address, address, date of birth, loyalty card number, certain purchase order details and partial payment card information. Although, it says the extent of the leak is different for everyone and not all types of information were involved for every customer.

Latest updates on company news here

Loblaw is also advising customers on steps and asking them to beware of unexpected emails, calls or texts.

It is offering complimentary credit monitoring and identity restoration services through TransUnion.

The company said in March that it detected suspicious activity on its IT network and determined an unauthorized third party had accessed some basic customer information but didn’t disclose how many customers were affected at the time.

It said it conducted a detailed investigation, notified law enforcement and regulatory authorities, and strengthened its security systems.

This report by The Canadian Press was first published Oct. 23, 2026.