A breach of Canadian Tire (Canada) was added to Have I Been Pwned’s breach database on 25 February 2026. It affected 38,306,562 accounts. Exposed: Financial account and card details, Passwords and logins, Email addresses, Phone numbers, Dates of birth and Names and more. The breach began on 2 October 2025, 146 days before it was reported.
Status
Confirmed breach
People affected
38,306,562 accounts
Reported
25 February 2026
Breach began
2 October 2025
Time to tell
146 days (the median in California’s notices over the last year: 154 days)
Look for Canadian Tire’s own notice or letter: it should say what of yours was involved. Keep it.
Change your Canadian Tire password, and the same password anywhere else you use it. Turn on two-step sign-in.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
Expect scams that use your details: calls, texts or emails pretending to be Canadian Tire, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked