\n\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t
\n\t
\n\t\t
\n\t\t\t
<\/p>\n
Employer \/ Organisation<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Sector<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Approx. timing (public disclosure)<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
What happened<\/p>\n
\n\t\t\t
\n\t\t
\n\t\t
\n\t\t\t
<\/p>\n
Canada Life (The Canada Life Assurance Company)<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Insurance; group benefits and retirement<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
April 2026<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Criminal group ShinyHunters accessed certain applications through a Canada Life employee account, exposing personal information for up to 70,000 people, with most affected belonging to one large corporate group benefits client.<\/p>\n
\n\t\t\t
\n\t\t
\n\t\t
\n\t\t\t
<\/p>\n
Telus \/ Telus Digital<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Telecommunications; digital services<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
March 2026<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Telus Digital confirmed a breach after ShinyHunters claimed a large\u2011scale theft of data following a multi\u2011month intrusion; Telus said a limited number of systems were accessed without authorisation.<\/p>\n
\n\t\t\t
\n\t\t
\n\t\t
\n\t\t\t
<\/p>\n
Loblaw Companies Limited<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Retail (food, pharmacy, financial services)<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
March 2026<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Loblaw reported that a criminal third party accessed \u201cbasic customer information\u201d such as names, phone numbers and e\u2011mail addresses after suspicious activity was detected on a non\u2011critical IT system; passwords, health and payment data were not affected.<\/p>\n
\n\t\t\t
\n\t\t
\n\t\t
\n\t\t\t
<\/p>\n
Freedom Mobile (owned by Vid\u00e9otron)<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Wireless telecommunications<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
December 2025<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Attackers used a subcontractor\u2019s compromised account to access data in Freedom Mobile\u2019s account management platform, exposing personal details (names, addresses, dates of birth, phone numbers and account numbers) for a limited number of customers; payment details and passwords were not taken.<\/p>\n
\n\t\t\t
\n\t\t
\n\t\t
\n\t\t\t
<\/p>\n
Canada Computers & Electronics<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Retail (technology, electronics)<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
February 2026<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
A system supporting the retailer\u2019s website was breached, affecting customers who checked out as guests between late December 2025 and late January 2026; stolen data included personal details and credit\u2011card information used in those transactions.<\/p>\n
\n\t\t\t
\n\t\t
\n\t\t
\n\t\t\t
<\/p>\n
Canadian Investment Regulatory Organization (CIRO)<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
Financial regulation; quasi\u2011public employer<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
January 2026<\/p>\n
\n\t\t\t
\n\t\t\t
<\/p>\n
A phishing\u2011originated breach first detected in August 2025 was disclosed as far more extensive than initially believed, compromising personal and financial data for about 750,000 investors, including highly sensitive identifiers and account statements.<\/p>\n
\n\t\t\t
\n\t\t
\n\t
<\/p>\n
Earlier this year, the Office of the Information and Privacy Commissioner for British Columbia (OIPC) said that 36 health\u2011care workers across three B.C. health authorities improperly accessed the medical records of Lapu Lapu Day Festival<\/a> victims 71 times. According to Lyndsay Wasser, partner and co-chair of privacy and data protection at McMillan, employee snooping<\/a> is not a niche issue confined to high-profile scandals. It is, in her words, \u201cactually a fairly common problem.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":" Employer \/ Organisation Sector …\n","protected":false},"author":2,"featured_media":13095,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[17,7146,7147,7145],"class_list":["post-13094","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canada","tag-canada","tag-canada-life","tag-cyber-incident","tag-data-breach"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/posts\/13094","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/comments?post=13094"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/posts\/13094\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/media\/13095"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/media?parent=13094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/categories?post=13094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/tags?post=13094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}