Skip to content
Loblaw Data Breach Affects Two Million Canadians

Loblaw Data Breach Affects Two Million Canadians

First seen 23 Oct 2026, 19:44 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 20:43 UTC
  • •Two million Canadians affected by March data breach.
  • •Personal information including names and payment details may have been exposed.
  • •Loblaw is offering credit monitoring and identity restoration services.

Loblaw has begun notifying two million Canadians about a data breach that occurred in March 2026. The breach may have exposed personal information including names, email addresses, addresses, dates of birth, loyalty card numbers, and partial payment card information. The company is advising customers to be cautious of unexpected communications and is offering free credit monitoring and identity restoration services through TransUnion. In March, Loblaw detected suspicious activity on its IT network and confirmed unauthorized access to customer information but did not disclose the number of affected customers at that time. The company has since conducted a detailed investigation and strengthened its security systems.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-03-01
Data breach detected
Loblaw identified suspicious activity on its IT network, leading to the discovery of unauthorized access to customer information.
Bnnbloomberg.Ca
2026-10-23
Breach notification begins
Loblaw starts notifying two million affected customers about the breach and the types of personal information that may have been leaked.
Theglobeandmail

More articles in this cluster (2)

Following this threat?

Track Loblaw in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 3

Common questions

What personal information was exposed?
The breach may have exposed names, email addresses, addresses, dates of birth, loyalty card numbers, and partial payment card information.
What should affected customers do?
Affected customers should monitor their accounts for suspicious activity and take advantage of the free credit monitoring and identity restoration services offered by Loblaw.
When did the breach occur?
The breach was detected in March 2026, but the extent of the impact was only disclosed recently.