The Ontario Cannabis Store says a data breach through Canada Post has affected information from 4,500 customers.
In a privacy update on its website, the OCS said the breach late on Nov. 1 affected about two per cent of its customer orders, and information was accessed by a person using a Canada Post delivery tracking tool.
The OCS said it has informed Ontario’s privacy commissioner of the breach and all affected customers.
“Since Nov. 1, the OCS has worked closely with Canada Post to identify the cause of this issue and to prevent any further unauthorized access to customer delivery information,” the OCS said.
Names of the people who made the orders were not obtained, if they were not the same as the people who signed for delivery, according to the OCS.
Delivery addresses, payment information and the contents of orders were also not released.
Delivery information that was disclosed includes:
- Postal codes.
- Names, or initials or people who signed upon delivery.
- Date of delivery.
- OCS reference numbers.
- Canada Post tracking numbers.
- OCS corporate names and business addresses.
The OCS said it has encouraged Canada Post to notify its customers of the breach.
Customers affected by the breach were notified by the OCS by email, it added.
If customers who have placed orders with the OCS did not receive an email notifying them of the breach, then their order delivery information was not obtained, it said.
Privacy a priority, store says in letter
In a letter to affected customers that was obtained by CBC Toronto, Patrick Ford, the OCS’s president and CEO, said privacy has been a concern of the store since it set up its website.
“The OCS takes privacy and security very seriously. Protecting customer information has been the number one priority since the development of OCS.ca,” he writes.
Customers with questions are urged to call the OCS’s customer service line at 1-888-910-0627.