The Ontario Cannabis Store says a data breach through Canada Post has affected information from 4,500 customers.
In a privacy update on its website, the OCS said the breach late on Nov. 1 affected about two per cent of its customer orders, and information was accessed by a person using a Canada Post delivery tracking tool.
The OCS said it has informed Ontario’s privacy commissioner of the breach and all affected customers.
“Since Nov. 1, the OCS has worked closely with Canada Post to identify the cause of this issue and to prevent any further unauthorized access to customer delivery information,” the OCS said.
Names of the people who made the orders were not obtained, if they were not the same as the people who signed for delivery, according to the OCS.
Delivery addresses, payment information and the contents of orders were also not released.
Delivery information that was disclosed includes:
- Postal codes.
- Names, or initials or people who signed upon delivery.
- Date of delivery.
- OCS reference numbers.
- Canada Post tracking numbers.
- OCS corporate names and business addresses.