Canada Computers says guest shoppers' card details exposed in website breach
Canada Computers & Electronics, the Richmond Hill, Ont., electronics chain, says personal information, including credit card details, of customers who checked out as guests on its website between Dec. 29, 2025 and Jan. 22, 2026 was compromised in a data breach.
The incident fell across the post-holiday shopping season and involved payment card data, the category of information most quickly turned into fraud. It also shows a practical difference between guest checkout and logged-in accounts on the same site.
What happened
The company said it learned on Jan. 22 that someone had accessed a system supporting its retail website, The Canadian Press reported. It notified law enforcement and regulators right away and launched an investigation with an independent forensic firm.
Customers who entered their details and checked out as guests during the five-week window were affected. Customers who logged in with a Canada Computers member account and all in-store shoppers were not affected, the company said, according to Insurance Business. Affected customers were notified on Jan. 25 and offered two years of free credit monitoring and identity protection services.
Bright Defense's breach tracker, citing CBC reporting, puts the number of affected guest-checkout customers at 1,284. Some customers criticized the retailer's early communications for being unclear about when the breach was found and when notices went out.
What we don't know yet
Canada Computers has not said how the intruder got into the system or whether the attack involved code that skimmed card data as it was typed, a common technique against online checkouts. No group has claimed the attack.
What to do
- If you checked out as a guest between Dec. 29 and Jan. 22, check your card statements for unfamiliar charges and ask your bank for a replacement card.
- Enrol in the credit monitoring offered in the company's notice.
- Be cautious of follow-up emails or calls claiming to be from Canada Computers that ask for card numbers or verification codes.
