Canadian Tire Consumer Privacy Data Breach (2025)

Summary

This is a proposed consumer privacy class action against Canadian Tire Corporation, Limited and its related entities (collectively, “Canadian Tire”). It arises out of a massive data breach affecting Canadian Tire’s shared e-commerce infrastructure, which was publicly disclosed in October 2025 (the “Data Breach”).

The class action alleges that cybercriminals extracted approximately 42 million records from Canadian Tire’s backend database, impacting over 38 million unique customer accounts across its core retail banners, including Canadian Tire, SportChek, Mark’s/L’Équipeur, and Party City. The compromised data, which was reportedly posted for sale on the Dark Web, includes customer names, physical addresses, email addresses, phone numbers, encrypted passwords, and, for a subset of users, full dates of birth and partial credit card details.

This lawsuit alleges that despite a history of cyberattacks, Canadian Tire failed to implement adequate safeguards to fix known or knowable data security vulnerabilities, and to protect the sensitive personal information entrusted to it by millions of Canadians. Furthermore, the lawsuit alleges that Canadian Tire failed to properly investigate and communicate regarding the true scope and impact of the data breach to its customers.

KND Complex Litigation is co-counsel with the Vancouver-based law firm of Hammerco Lawyers LLP on this class action.

Class Membership Criteria

All natural persons residing or domiciled in Canada whose sensitive personal information was accessed by unauthorized parties or otherwise compromised in the course of or as a result of the Data Breach.

Subscribe For Updates

To receive updates in relation to this proceeding, complete and submit the form below. By completing and submitting this form, you will not incur any costs or financial risks in relation to this class proceeding. We use investors’ contact information to communicate updates in relation to the proceeding when updates become available. Refer to our Privacy Policy to learn more about our collection and use of information.