Canadian Tire data breach
The Canadian Tire breach happened on October 2, 2025 and exposed 38,306,562 accounts. 8 kinds of data were exposed.
Overview
- Site
- canadiantire.ca
- Breach date
- October 2, 2025
- Recorded on
- February 25, 2026
- Accounts exposed
- 38,306,562
- Exposed data
- Dates of birth, Email addresses, Genders, Names, Partial credit card data, Passwords, Phone numbers, Physical addresses
- Risk score
- 85 out of 100
Risk based on the exposed data
This breach scores 85 out of 100. The score is driven mostly by Passwords, Partial credit card data, Phone numbers.
The risk score is a guide to how dangerous a breach is, judged by the kinds of data exposed. The number of accounts is not included.
Breaches from the same period
- Substack (2025-10-23, 663,121 accounts)
- MyVidster (2025) (2025-10-24, 3,864,364 accounts)
- WIRED (2025-09-08, 2,364,431 accounts)
What affected users should do
- Change your Canadian Tire password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
- Turn on two-factor authentication for your login.
- Phone numbers were exposed, so watch out for impersonation by text message or phone call.
- Card or bank details were exposed, so check your statements and contact your card issuer or bank about any charges you do not recognize.
This site organizes publicly available information about data breaches. Data as of February 25, 2026. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.