What should impacted Canadian Tire customers do?
According to an FAQ page for the cybersecurity incident, affected customers will receive an email from TransUnion on behalf of CTC in the next week.
In the meantime, the company said customers don’t need to change their passwords. However, it does advise shoppers to use strong and unique passwords.
“Avoid re-using passwords and make sure to enable multi-factor authentication wherever possible,” stated the FAQ page.
Canadian Tire also said customers don’t need to replace their credit cards because “the data involved did not include full credit card numbers or CVVs.”
“In some cases, account information included incomplete credit card numbers, similar to what appears on a store receipt,” explained the company. “This cannot be used for account access, transactions or purchases.”
Canadian Tire isn’t the only major company that has experienced a data breach in recent months.
In August, WestJet announced that it had been hit by a cyberattack that compromised flyers’ passport information.
WealthSimple also experienced a data breach in August, which led to a class-action lawsuit filed against the investment service.