Canadian Tire says customer info caught in data breach on e-commerce platform

Canadian Tire Corp. Ltd. says it has identified a data breach involving personal information belonging to customers, which was stored in an e-commerce database.

Breach includes names, addresses, emails, birth years, incomplete credit card info

A red triangle affixed with a green maple leaf is displayed on the exterior of a building.

Canadian Tire Corp. Ltd. says it has identified a data breach involving personal information belonging to customers, which was stored in an e-commerce database.

The retailer says the breached information belongs to shoppers who had an e-commerce account with Canadian Tire or its other banners, SportChek, Mark's/L'Equipeur and Party City.

The breached data included names, addresses, emails and birth years, as well as encrypted passwords and in some cases incomplete credit card numbers.

Canadian Tire says the full dates of birth for some 150,000 account holders were also part of the breach.

The company says the information breached is not enough to access accounts and make purchases and that the incident did not impact its ability to facilitate in-store transactions.

Canadian Tire says it has resolved the vulnerability it identified on Oct. 2 and is working with experts to enhance its security.