Someone has posted a database of over 2.8 million records to a hacker forum, claiming they originated from a March 2024 hack at Canadian retail chain Giant Tiger.<\/p>\n
When asked, they posted a small snippet as proof. The download of the full database is practically free for other active members of that forum.<\/p>\n
In March, one of Giant Tiger\u2018s vendors, a company used to manage customer communications and engagement, suffered a cyberattack, which impacted Giant Tiger, as reported by CBC<\/a>.<\/p>\n The retailer first learned of the security incident on March 4, 2024, and concluded that customer information was involved by March 15, according to an email the company wrote to customers. Giant Tiger also noted that the security incident only impacted one of its vendors and didn’t affect the chain\u2019s store systems or applications, saying that \u201cthere is no indication of any misuse of the information.\u201d<\/p>\n On April 12, 2024, BleepingComputer<\/a> noticed a post titled “Giant Tiger Database – Leaked, Download!” on the hacker forum. The records contain over 2.8 million unique email addresses, names, phone numbers and physical addresses.<\/p>\n When contacted by BleepingComputer, Giant Tiger said:<\/p>\n “We determined that contact information belonging to certain Giant Tiger customers was obtained without authorization. We sent notices to all relevant customers informing them of the situation.”<\/p>\n<\/blockquote>\n and:<\/p>\n “No payment information or passwords were involved.”<\/p>\n<\/blockquote>\n Depending on customer\u2019s buying behavior, the data leaked in the breach may vary. Loyalty members and those who placed online orders for in-store pickups might have had their names, emails and phone numbers compromised. Some customers, who placed online orders for home delivery, may have had that same information plus their street addresses compromised.<\/p>\n There are some actions you can take if you are, or suspect you may have been, the victim of a data breach<\/a>.<\/p>\n Malwarebytes has a new free tool for you to check if your personal data has been exposed online. Submit your email address (it\u2019s best to give the one you most frequently use) to our\u00a0free Digital Footprint scan<\/a>\u00a0and we\u2019ll give you a report and recommendations.<\/p>\n\n
\n
Protecting yourself from a data breach<\/h2>\n
\n
Check your digital footprint<\/h3>\n