Save-On-Foods loyalty program members' personal info accessed in breach

The breach occurred on one of Save-On-Foods’ servers on October 13, which was ‘quickly contained’ before an investigation was launched with a cybersecurity expert. Customers’ names, addresses, phone numbers, email addresses, and dates of birth were accessed. Save-On-Foods requires online shoppers to be signed up for the More Rewards program, which also offers members exclusive in-store discounts.

The Canadian Centre for Cyber Security warns that personal information can be used by cybercriminals to make phishing attacks more convincing, impersonating trusted organizations to trick people into sharing sensitive information or sending money. Richard Frank, director of Simon Fraser University’s international cybercrime centre, explained that personal information is often used by cybercriminals to impersonate companies in emails requesting more information or containing malicious links.

Save-On-Foods has notified the appropriate authorities and privacy regulators, and is advising customers to be vigilant about suspicious calls or messages, as it will not send any communications asking for passwords, banking information, payment information, social insurance numbers or security question answers.