Recent Data Leaks
Live
← Back to timeline

Canadian Tire

Have I Been PwnedConfirmed breachAdded February 25, 2026Occurred October 2, 202538,306,562 accountscanadiantire.caAll Canadian Tire breaches →
What was exposed
Dates of birthEmail addressesGendersNamesPartial credit card dataPasswordsPhone numbersPhysical addresses
What to do if you were affected
Details
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). In its disclosure notice , Canadian Tire advised that the incident did not impact bank account information or loyalty program data.
Frequently asked questions

What is the Canadian Tire data breach?

In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a...

When did the data breach happen?

This data breach occurred around October 2025.

How many accounts were affected?

Around 38,306,562 accounts were affected.

What information was exposed?

Exposed data included Dates of birth, Email addresses, Genders, Names, Partial credit card data, Passwords, Phone numbers and Physical addresses.

What should I do if I was affected?

Change your password for this account, and anywhere you reused it. Turn on two-factor authentication. Watch your card and bank statements for unfamiliar charges, and consider requesting a new card number. Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.

View on source ↗
Related breaches