Overview
- Pattison discovered unusual activity on October 13, took the affected server offline that day and retained a third‑party cybersecurity firm to investigate.
- The company confirmed that the breached More Rewards database contained customer names and, where provided, addresses, phone numbers, email addresses and dates of birth.
- Pattison says no passwords, payment card data or transaction history were accessed and that More Rewards accounts themselves remain secure according to information available so far.
- More Rewards has emailed affected customers, notified authorities and privacy regulators, provided a customer service line at 1‑833‑690‑1146 and has not disclosed how many accounts were affected.
- Security experts warn that exposed contact details and birthdates make phishing and identity fraud more likely and note this incident follows several recent data breaches at Canadian retailers.