Isabelle is a staff writer at Daily Hive covering all things national and trending. She was an assistant editor at Chatelaine and has written for the Toronto Star, Complex Canada and the RepresentASIAN Project. Got a story tip? Reach her at isabelle@dailyhive.com

If you shop at Loblaw-owned stores, you could have been affected by a recent data breach.
On March 10, Canada&#8217;s largest grocer and pharmacy retailer notified customers that it&#8217;s investigating a &#8220;low-level data breach.&#8221;
&#8220;After identifying suspicious activity on a contained, non-critical part of its IT network, the Company has determined that a criminal third-party accessed some basic customer information such as names, phone numbers, and email addresses,&#8221; reads the <a href="https://www.loblaw.ca/en/loblaw-notifies-customers-of-a-low-level-data-breach/" target="_blank">notice</a>.
If you were suddenly logged out of your PC Optimum app and other Loblaw apps that use PCid, don&#8217;t be alarmed.
The company said it secured its network and customer information as part of its security response protocol. This means that all customers were automatically logged out of their accounts and will therefore need to log back in if they want to access the company&#8217;s digital services.
&#8220;By logging back in, you have successfully re-authenticated your account. Your account is secure, and we apologize for any inconvenience this temporary interruption may have caused,&#8221; reads <a href="https://www.loblaw.ca/en/real-talk-important-information-about-your-account/" target="_blank">another notice</a> from the grocer on March 10.
Users received the notification about the data breach on the PC Optimum app.
<div id="attachment_2252609" style="width: 1187px" class="wp-caption alignnone"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-2252609" class="size-full wp-image-2252609" src="https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-scaled.png" alt="loblaw" width="1177" height="2560" srcset="https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-scaled.png 1177w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-230x500.png 230w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-471x1024.png 471w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-706x1536.png 706w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-942x2048.png 942w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/IMG_1841-1200x2609.png 1200w" sizes="(max-width: 1177px) 100vw, 1177px" />PC Optimum app</div>
Loblaw assured customers that its current investigation indicates that passwords, health information and credit card data were not compromised. It added that PC Financial was not impacted by the cyberattack.
Lastly, the grocer said stores, payment systems, and operations were not impacted by the data breach.
However, cybercrime tracker Dark Web Informer alleges that the data breach is much wider in scope than the company has shared.
In a post on X on March 13, Dark Web Informer found that a hacker is allegedly threatening to publicly leak all data if the company does not respond by March 19.
<blockquote class="twitter-tweet">
‼️🇨🇦 A threat actor claims to have breached Loblaw, Canada&#8217;s largest food and pharmacy retailer, threatening to publicly leak all data if the company does not respond by March 19th.
The allegedly exfiltrated data includes 75.1M Salesforce customer PII records, 724.9M Shoppers… <a href="https://t.co/P0QnkB1Q5X">pic.twitter.com/P0QnkB1Q5X</a>
— Dark Web Informer (@DarkWebInformer) <a href="https://twitter.com/DarkWebInformer/status/2032507127814558146?ref_src=twsrc%5Etfw">March 13, 2026</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The data breach allegedly includes the personal information of 75.1 million Salesforce customers, 724.9 million Shoppers Drug Mart Hybris rows with payment info and credit card details, 129.9 million pharmacy fill request records with prescription numbers and patient IDs, 120.4 million e-commerce fraud-feed records, 20.2 million Delivery Ops Portal rows, 3,014 GitLab projects with full source code, 19.3 million Oracle IDCS user identity records, and 55.3 million SFMC marketing/email records across 673 tables.
The hacker claims the grocery giant is downplaying the cyberattack.
<div id="attachment_2252611" style="width: 2298px" class="wp-caption alignnone"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-2252611" class="size-full wp-image-2252611" src="https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk.jpeg" alt="" width="2288" height="645" srcset="https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk.jpeg 2288w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk-500x141.jpeg 500w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk-1024x289.jpeg 1024w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk-1536x433.jpeg 1536w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk-2048x577.jpeg 2048w, https://images-dh-production-baselayer.dailyhive.com/uploads/2026/03/HDTqFjaXAAAinDk-1200x338.jpeg 1200w" sizes="(max-width: 2288px) 100vw, 2288px" />@DarkWebInformer/X</div>
In an email statement to Daily Hive, Loblaw reiterated that no passwords, health information or credit card data were impacted in the breach, and there is no impact to operations. It did not verify the claims shared by the cybercrime tracker.
&#8220;We do not have anything additional to add to our statement as the investigation continues, including responding to new threats from cyber criminals,&#8221; stated the spokesperson.
The company also did not specify how many Canadians were impacted by the data breach.
Loblaw is the parent company of Shoppers Drug Mart, No Frills, Loblaws, and Real Canadian Superstore. It&#8217;s one of the largest retailers and private sector employers in Canada, with over 220,000 colleagues across the country.
&#8220;The Company will provide further updates as necessary as the investigation progresses,&#8221; reads a notice.
<ul class="article-see-also">You might also like:<li><a href='https://dailyhive.com/canada/permanent-residence-canada-french-lessons' target='_blank'>Newcomers rush to learn French to get permanent residence in Canada</a></li><li><a href='https://dailyhive.com/canada/canada-child-disability-benefit-march-2026' target='_blank'>Some Canadians will get several government benefit payments this week</a></li><li><a href='https://dailyhive.com/canada/lottery-winner-delroy-shand' target='_blank'>Down-to-earth Canadian plans to keep lottery win celebrations low-key</a></li></ul>

Loblaw responds to claims that it's downplaying recent data breach affecting Canadians

Vancouver

Calgary

Toronto

Edmonton

Cybercrime tracker Dark Web Informer alleges that the data breach is much wider in scope than Loblaw has shared.