// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-hibpDTG 0600Z
ColdRecon / Breach Radar / Canadian Tire
Breach Record

Canadian Tire

DISCLOSED 2025-10-02 · STOLEN CREDS · 38,306,562 RECORDS EXPOSED

In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card...

The record

What we know

Disclosed
2025-10-02
Attack vector
Stolen Creds
Records exposed
38,306,562
Domain
canadiantire.ca
Data classes exposed
Dates of birthEmail addressesGendersNamesPartial credit card dataPasswordsPhone numbersPhysical addresses
Sources

Cited reporting

↗ Have I Been Pwned (2026-02-25)
Similar vector · recent

Other stolen creds breaches on file

23andMe · 2026-06-01 Krispy Kreme · 2026-06-01 Gravity Bridge · 2026-05-31 Atlas Menu · 2026-05-30 Krispy Kreme · 2026-05-29 Krispy Kreme · 2026-05-28 Mytheresa · 2026-05-28 Charter · 2026-05-23

This page is the permanent ColdRecon entry for the Canadian Tire disclosure. It updates if new public reporting emerges. All tracked breaches →

Canadian Tire just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →