Canada Computers & Electronics is currently investigating a data breach that impacted numerous individuals, leading to customer frustration with the company’s handling of the situation and communication methods.
Eric Pimentel, an IT professional, expressed disappointment over the incident, mentioning that he took precautionary measures by canceling his credit card upon receiving a warning from the company, only to later discover that he was not actually affected. Similarly, Brad Seward from Toronto also canceled his card following a notification from Canada Computers, only to find out later that he was not among the impacted customers.
According to Canada Computers, the breach affected 1,284 customers, with unauthorized access to the system supporting their retail website compromising personal customer information, including credit card details. The company promptly initiated containment measures, informed relevant authorities, and commenced an investigation, notifying affected customers on January 25.
The breach has been reported to both the federal privacy watchdog and police in York Region. Despite some customers, including Pimentel and Seward, receiving conflicting notifications regarding their status in relation to the breach, the company acknowledged these discrepancies as miscommunication and apologized for the confusion.
Canada Computers clarified that the breach only affected customers who checked out as “guests” on their website between December 29 and January 22, providing an explanation that did not align with the experiences of some customers. Pimentel and Seward, who did not perform guest checkouts, expressed concerns over the lack of transparency from a major retailer like Canada Computers, which operates numerous stores across multiple provinces, in addition to its online platform.
Cybersecurity experts, including Terry Cutler and John Bruggeman, highlighted the potential longevity of data breaches before detection and emphasized the importance of customer vigilance. Canada Computers has offered affected customers guidance on safeguarding their personal and financial information, along with two years of credit monitoring and identity theft protection.
