Canadian Tire
Disclosed Feb 25, 20267 months ago38,306,562 accountsConfirmed
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). In its disclosure notice , Canadian Tire advised that the incident did not impact bank account information or loyalty program data.
What is known
| People affected | 38,306,562 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 25, 2026 |
| Happened | Oct 2, 2025 |
| Attack | Not stated |
| Data exposed | Dates of birth, Emails, Names, Payment cards, Passwords, Phone numbers, Addresses |
| Sector | Tech |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Canadian Tire disclosurecorp.canadiantire.ca · The organization | The organization |
| Have I Been Pwned: Canadian Tirehaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Feb 25 | 38,306,562 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.