Overview
- Pattison detected unauthorized activity on a More Rewards server and shut it down, an incident the company says it discovered on Tuesday, Oct. 13.
- The company confirmed that names and, where provided, addresses, phone numbers, email addresses and dates of birth were accessed from the More Rewards database.
- Pattison says passwords, payment card data and transaction history were not accessed and that More Rewards accounts themselves remain secure.
- The retailer has emailed affected customers, notified authorities and privacy regulators, set up a customer service line and engaged a third‑party cybersecurity firm to lead the probe.
- Security experts warn that exposed contact details and birthdates make customers vulnerable to targeted phishing and identity scams, and Pattison has not yet disclosed how many accounts were affected or whether credit monitoring will be offered.