Canadian Tire Data Breach Exposed Nearly 42M Records
TL;DR
Canadian Tire suffered a major data breach in October 2025, exposing nearly 42 million records including email addresses, personal details, and some credit card data. The incident affected far more than initial reports of 150,000 accounts.
Source: Have I Been Pwned
According to a data breach overview on the Have I Been Pwned site last week, in Oct. 2025, Toronto-based retailer Canadian Tire Corporation (TSX: CTC) was the victim of a data breach that exposed almost 42 million records. The data contained 38 million unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). Media outlets originally reported that 150,000 account holders were affected. Canadian Tire's 1,700 retail and gasoline outlets are supported by their Financial Services division and tens of thousands of people employed across the country. Full Story