Last mentioned: Mar 11, 2026
Public Disclosure
Loblaw issues a news release and begins notifying affected customers of the data breach.
Suspicious Activity Detected
Loblaw identifies unauthorized access on a non-critical segment of its IT network.
Network Secured
The company secures the network and forces a logout for all customer accounts.
Internal Investigation
Investigation confirms that PC Financial and sensitive health/financial data were not compromised.
Loblaw Cos. Ltd. has disclosed a data breach involving a criminal third-party that accessed customer names, phone numbers, and email addresses. While the company describes the incident as a low-level breach affecting a non-critical part of its network, it has proactively logged all customers out of their accounts to secure the environment.
Loblaw Cos. Ltd. has confirmed a low-level data breach involving a criminal third-party accessing customer contact information. While passwords and financial data remain secure, the incident highlights ongoing cybersecurity vulnerabilities in Canada’s largest retail network.