Loblaw apologizes to 2 million customers following data breach

Loblaw Companies Ltd. CEO Per Bank has issued an apology to approximately two million customers affected by a data breach that occurred in early 2024. The company confirmed that an unauthorized third party accessed personal information through its technology systems.

The compromised data includes names, addresses, phone numbers, birthdates, email addresses, loyalty card numbers, purchase details, and partial payment card information. The extent of the leaked data varies by individual.

As a remedial measure, Loblaw is offering two years of complimentary credit monitoring and identity restoration services through TransUnion. Affected shoppers have until February 28, 2027, to enroll. The company has also strengthened its security systems and notified law enforcement and regulatory authorities. Customers are advised to remain vigilant against suspicious emails, calls, or texts requesting personal information.