Overview

• The incident involves customers with e‑commerce accounts across Canadian Tire, SportChek, Mark's/L'Équipeur and Party City.
• Exposed data included names, addresses, emails, birth years, encrypted passwords and truncated credit card numbers, with full dates of birth for fewer than 150,000 accounts.
• The company says no Canadian Tire Bank or Triangle Rewards data were involved, and both in‑store transactions and e‑commerce systems remain operational.
• Canadian Tire identified the vulnerability on Oct. 2, resolved it and reports no indication of ongoing unauthorized activity while internal teams and external experts continue monitoring.
• Affected customers will be contacted by TransUnion with credit monitoring and guidance, the company advises strong unique passwords and multi‑factor authentication, and it has notified privacy regulators.