Loblaw notifies customers of a low-level data breach

Executive Summary

• Loblaw Companies Limited disclosed that a criminal third‑party accessed basic customer information (names, phone numbers, email addresses) after suspicious activity was detected on a non‑critical part of its IT network.
• The company has secured the affected systems, logged all customers out, and requires re‑authentication; passwords, health data, credit‑card details and PC Financial accounts were not compromised.
• Loblaw is conducting a forensic investigation to determine the scope and impact of the breach and will provide further updates as information becomes available.

Key Details

• Incident Discovery: Suspicious activity identified on a contained, non‑critical segment of Loblaw’s IT network.
• Compromised Data: Basic customer identifiers – names, phone numbers, email addresses. No passwords, health information, credit‑card data, or PC Financial details were compromised.
• Immediate Response: Network secured; all customers automatically logged out and must re‑login to access digital services.
• Investigation Status: Ongoing forensic investigation to assess the breach’s full scope and impact.
• Impact Statement: No impact on PC Financial operations reported.
• Forward‑Looking Statements: Loblaw notes that forward‑looking information may change based on investigation outcomes; no obligation to update unless required by law.

Notable Quotes

(No direct quotes were provided in the release.)