Privacy Unpacked

Confirmed breach

Loblaw data breach

CACanada · loblaw.ca

Loblaw (Canada) notified the Loblaw of a data breach on 23 October 2026. It affected 2,000,000 people. Exposed: Financial account and card details, Email addresses, Phone numbers, Dates of birth, Names and Purchase details and more.

Status
Confirmed breach
People affected
2,000,000 people
Reported
23 October 2026

What was exposed

  • Financial account and card details
  • Email addresses
  • Phone numbers
  • Dates of birth
  • Names
  • Purchase details
  • Billing and shipping addresses

Sources

Read our story about this breach →

If Loblaw had your data

  1. Look for Loblaw’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
  3. Expect scams that use your details: calls, texts or emails pretending to be Loblaw, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in Canada

  1. Toronto Crime StoppersCACanada · 22 October 2026 Tips 176.9Ktips
  2. Save-On-FoodsreportedCACanada · 17 October 2026 Personal information –not reported
  3. Golf CanadaCACanada · 22 August 2026 Email addressesDates of birthNames+3 569Kaccounts

Every breach in Canada →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.