Someone has posted a database of over 2.8 million records to a hacker forum, claiming they originated from a March 2024 hack at Canadian retail chain Giant Tiger.
When asked, they posted a small snippet as proof. The download of the full database is practically free for other active members of that forum.
In March, one of Giant Tiger‘s vendors, a company used to manage customer communications and engagement, suffered a cyberattack, which impacted Giant Tiger, as reported by CBC.
The retailer first learned of the security incident on March 4, 2024, and concluded that customer information was involved by March 15, according to an email the company wrote to customers. Giant Tiger also noted that the security incident only impacted one of its vendors and didn't affect the chain’s store systems or applications, saying that “there is no indication of any misuse of the information.”
On April 12, 2024, BleepingComputer noticed a post titled "Giant Tiger Database - Leaked, Download!" on the hacker forum. The records contain over 2.8 million unique email addresses, names, phone numbers and physical addresses.
When contacted by BleepingComputer, Giant Tiger said:
> "We determined that contact information belonging to certain Giant Tiger customers was obtained without authorization. We sent notices to all relevant customers informing them of the situation."
and:
> "No payment information or passwords were involved."
Depending on customer’s buying behavior, the data leaked in the breach may vary. Loyalty members and those who placed online orders for in-store pickups might have had their names, emails and phone numbers compromised. Some customers, who placed online orders for home delivery, may have had that same information plus their street addresses compromised.
There are some actions you can take if you are, or suspect you may have been, the victim of a data breach.
Malwarebytes has a new free tool for you to check if your personal data has been exposed online. Submit your email address (it’s best to give the one you most frequently use) to our free Digital Footprint scan and we’ll give you a report and recommendations. If you're worried your data was caught up in the Giant Tiger breach, we can tell you that too.
We don't just report on threats - we help safeguard your entire digital identity
Cybersecurity risks should never spread beyond a headline. Protect your—and your family's—personal information by using identity protection