Author: Adam Bishop
-
Canadian Tire Data Breach
On October 2, 2025, Canadian Tire Corporation (CTC) identified unauthorized access to an e-commerce database containing customer information. The breach affected accounts across Canadian Tire, SportChek, Mark’s/L’Équipeur, and Party City, exposing names, addresses, emails, birth years, encrypted passwords, and in some cases, truncated credit card numbers. No banking or loyalty program data was compromised, and…
-
What SMBs Need to Know from the 2025 CIRA Survey
Cybersecurity in Canada, On Guard for Thee. Cyber threats are no longer a distant concern for Canadian businesses—they’re a daily reality. The 2025 CIRA Cybersecurity Survey, conducted by The Strategic Counsel, gathered insights from 500 cybersecurity decision-makers across the country. The findings reveal a landscape where cyber-attacks are not just expected—they’re recurring. For SMBs, this…
-
Be aware—the threat is real and significant
Canadian small and medium-sized businesses might want to take this threat more seriously. Cybercrime is surging globally, and Canadian small and medium-sized businesses (SMBs) are increasingly in the crosshairs. Yet many business owners still believe they’re too small to be targeted — a dangerous assumption, according to cybersecurity experts. Canada’s national cybersecurity agency warns that…
-
Canada’s Cyber Insurance Market
A Window of Opportunity Amid Uncertainty Canadian businesses are currently enjoying a favorable cyber insurance landscape, with rate reductions and broader coverage options marking a significant shift from the hard market conditions of recent years. According to Aon’s Fall 2025 Canadian Insurance Market Update, abundant reinsurance capacity across North America helped drive a buyer-friendly environment…
-
Cyber Risk Doesn’t End on Day One
Cyber attacks are no longer isolated incidents—they’re long-tail events that can stretch from the initial breach to months or even years of legal, financial, and reputational fallout. While headlines often focus on the moment of impact, the real challenge for businesses begins when stakeholders start asking tough questions: How did it happen? Were we prepared?…
-
Government of Canada MFA Breach
On August 17, 2025, the Government of Canada disclosed a cybersecurity incident involving 2Keys Corporation, a third-party provider of multi-factor authentication (MFA) services used by CRA, ESDC, and CBSA. A routine software update introduced a vulnerability that exposed phone numbers and email addresses of users who accessed these services between August 3 and 15. Some…
