Data tracker

Canadian breach tracker

Data breaches and cyber incidents at Canadian organizations, each checked against the organization's own notice, a regulator or a named news report. Select an organization for the details and the sources.

Last updated October 31, 2026 · How we keep this tracker

12breaches trackedDisclosed by Canadian organizations
31Mpeople affectedWhere disclosed; 7 did not say
Ransomwaremost common causeWhere the cause is known
Governmentmost affected sectorBy number of breaches

Canadian data breaches, newest first
Disclosed Sort ascending	Organization	Sector	Where	People affected	Cause	Status
Oct 31, 2026	Four Bay Street Law Firms Hit by Coordinated Cyberattack	Professional services	Ontario	Not disclosed	Phishing	Confirmed
Feb 8, 2023	Indigo ransomware attack	Retail	Ontario	Not disclosed	Ransomware	People notified
Dec 17, 2019	LifeLabs customer data breach	Health care	Ontario	15,000,000	Not disclosed	Resolved
Jul 29, 2019	Capital One credit card data breach	Finance and insurance	Ontario	6,000,000	Misconfiguration	People notified

How we keep this tracker

What we include

Breaches and cyber incidents at organizations in Canada, or affecting people in Canada, that have been made public. Each record links to its sources: the organization's notice, a privacy commissioner or regulator, or a news report we can name. Numbers come from those sources; when none was disclosed, we say so.

What we leave out

Claims that only appear on criminal leak sites, data that was stolen and published, and the names of people affected. We never link to leaked data.

What the statuses mean

Under investigationThe organization has reported an incident and is still finding out what was affected.
ConfirmedThe organization has confirmed that personal or business data was accessed or taken.
People notifiedThe organization has told the people affected, as Canadian privacy law requires.
ResolvedThe investigation is closed, or a regulator has published its findings.

Know of a breach we missed, or see something wrong? Tell us, with a link to the notice. We correct errors openly: see our corrections policy.