Kelowna 
Canadian Tire Corporation has identified a data breach affecting customer information in one of its e-commerce databases.
The company says the unauthorized activity occurred on October 2, 2025, and that the issue was limited to that database, with no impact on Canadian Tire Bank or Triangle Rewards loyalty systems.
The affected database included customer accounts from Canadian Tire, SportChek, Mark’s/L’Équipeur, and Party City. Information accessed consisted of names, addresses, email addresses, and year of birth. In fewer than 150,000 accounts, dates of birth were also included. The data also contained encrypted passwords and partially masked credit card numbers, neither of which, as per the company, could be used for account access or purchases.
Canadian Tire stated that the vulnerability has been resolved and that its e-commerce systems remain fully operational. The company is working with external cybersecurity experts to strengthen system protections and has reported the incident to privacy regulators.
Affected customers will be notified directly by email through TransUnion and offered credit monitoring services. The company emphasized that no action is required from other customers, although it recommends maintaining strong, unique passwords and using multi-factor authentication as a precaution.
Canadian Tire said it continues to monitor its systems closely and has taken additional measures to enhance cybersecurity.
