---
title: Loblaw puts a number on its March breach: about 2 million Canadians, with birthdates, addresses, loyalty numbers and partial card data | ctxsec
url: https://ctxsec.com/items/loblaw-march-breach-2-million-notified
description: ""
status: "confirmed (Loblaw incident page; ~2 million figure from Loblaw via The Canadian Press and CBC, Oct 23); attacker not named"
published: 2026-10-23
---

> 

[← Cybersecurity News](/news) · [markdown](/items/loblaw-march-breach-2-million-notified.md)

confirmed (Loblaw incident page; ~2 million figure from Loblaw via The Canadian Press and CBC, Oct 23); attacker not named

2026-10-23

### Loblaw puts a number on its March breach: about 2 million Canadians, with birthdates, addresses, loyalty numbers and partial card data

Canada's largest grocer said on **Oct 23** that it is starting to notify about **2 million** customers hit by the intrusion it first disclosed in March, when it forced a logout of PC Optimum and other PCid apps.

In March Loblaw said only basic details (names, phone numbers, emails) were accessed. Its updated incident page now lists names, addresses, phone numbers, emails, **dates of birth**, loyalty account numbers, some purchase order details, billing and shipping addresses and **incomplete payment card information**, varying by customer. Loblaw says the incident is contained and reported to police and regulators, and it is offering credit monitoring and identity restoration through TransUnion's Cyberscout. It has not said who was behind it or how they got in.

If you get a notice, it comes through Cyberscout. Treat any other unexpected Loblaw or PC Optimum message asking you to log in or pay as a likely phish.

Sources: [Loblaw incident page (updated Oct 2)](https://www.loblaw.ca/en/real-talk-important-information-about-your-account/) · [The Canadian Press via BNN Bloomberg (Oct 23)](https://www.bnnbloomberg.ca/business/company-news/2026/10/23/loblaw-says-march-data-breach-affected-about-two-million-canadians/) · [CBC News (Oct 23)](https://www.cbc.ca/news/business/loblaw-data-breach-apology-9.7393626)