Canadian Tire data breach
38,306,562 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Dates of birthEmail addressesGendersNamesPartial credit card dataPasswordsPhone numbersPhysical addresses
What to do
- Change your Canadian Tire password, and the password on any other site where you used the same one.
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Be wary of texts and calls that seem to know your details.
- Check your bank and card statements, and ask your bank about a new card if you see anything odd.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). In its disclosure notice, Canadian Tire advised that the incident did not impact bank account information or loyalty program data.