Save-On-Foods, a popular Canadian supermarket chain, has informed members of its loyalty program that their personal details were compromised in a cybersecurity incident. The breach, detected on October 13, involved unauthorized access to a server, which was promptly contained. Following the discovery, Save-On-Foods initiated an investigation with cybersecurity experts and sent out emails to More Rewards customers to notify them of the breach.
The affected customers were informed that their names, addresses, phone numbers, email addresses, and dates of birth were accessed during the breach. While the exact number of impacted customers was not disclosed by Save-On-Foods, the company’s parent organization, the Pattison Food Group, states that the More Rewards program boasts over 3.5 million members.
Although the accessed information did not include sensitive data like credit card details or passwords, cybersecurity experts warn that personal information can still be exploited by cybercriminals for phishing attacks. Richard Frank, director of Simon Fraser University’s international cybercrime center, explained that cybercriminals often leverage stolen personal data to craft convincing scams that target individuals.
In response to the breach, Save-On-Foods advised More Rewards members to remain cautious of any suspicious communications and assured that the company would not request sensitive information like passwords or banking details via unsolicited messages. The supermarket chain also confirmed that it had notified relevant authorities and privacy regulators about the incident, emphasizing its commitment to addressing the security breach promptly and transparently.
The breach has sparked concerns among customers, with many expressing frustration over the potential risks associated with loyalty programs that collect personal information. Some users reported encountering difficulties when attempting to change their passwords following the breach notification. As investigations continue, the Office of the Information and Privacy Commissioner for British Columbia has been contacted for further insights.