BRAMPTON – Loblaw says it is starting to notify about two million Canadians who were affected by a data breach in March with specifics about which personal information of theirs leaked.
The grocer is notifying affected consumers directly about the breach, which may have revealed data including their name, email address, home address, date of birth, loyalty card number, certain purchase order details and partial payment card information. Although, it says the extent of the leak is different for everyone and not all types of information were involved for every customer.
Loblaw is also advising customers on next steps and asking them to beware of unexpected emails, calls or texts.
It is offering complimentary credit monitoring and identity restoration services through TransUnion.
The company said in March that it detected suspicious activity on its IT network and determined an unauthorized third party had accessed some basic customer information but didn’t disclose how many customers were affected at the time.
It said it conducted a detailed investigation, notified law enforcement and regulatory authorities, and strengthened its security systems.
This report by The Canadian Press was first published Oct. 23, 2026.
Companies in this story: (TSX: L)
