Toronto (Rajeev Sharma): Canada Computers & Electronics has acknowledged a data breach involving the personal information of some online customers, but the retailer is drawing criticism for providing limited details about the incident, including how many people were affected and when the breach occurred.
In a statement to CBC News, the company said it became aware of the breach on Friday and confirmed that customer data — including credit card information — had been compromised. Affected customers were notified on Monday, advised on precautionary steps, and the incident was reported to authorities.
However, neither the company’s public statement nor customer notifications specified the timing or duration of the breach, nor the total number of individuals impacted. Canada Computers said only that “a few” customers were affected and promised a further update by the end of the week.
On Saturday, the retailer published additional details on its website, stating that customers who completed purchases as “guests” between Dec. 29 and Jan. 22 and entered personal information were impacted. Customers who logged in using a Canada Computers member account, as well as those who made in-store purchases, were not affected, the company said.
Canada Computers added that it has hired an independent forensic cybersecurity firm to investigate the source and scope of the breach and to help strengthen its systems. The company is offering two years of free credit monitoring and identity protection services to affected customers and says it will contact them directly.
Despite these measures, several customers have expressed frustration with what they describe as a lack of transparency.
Alex Brochu, an IT professional from Drummondville, Que., said he was “appalled” by the breach and concerned about how it occurred. Brochu, who made a purchase during the holiday season, cancelled his credit card after receiving the notification but said he has not seen any fraudulent activity so far.
Toronto resident Brad Seward, who also purchased items online in late December, said the company’s communication has been insufficient. “There needs to be accountability,” he said.
While the company told customers it has no evidence the stolen data has been misused, some remain unconvinced. Jenna Francis-Koch of Kelowna, B.C., said her bank flagged a suspicious transaction on her credit card in mid-January, shortly after she made a purchase from the retailer’s website. She said she did not receive a direct notification from the company and only learned of the breach through online discussions.
Francis-Koch said she wants the retailer to be more forthcoming and to clearly alert customers on its website.
Canada’s Office of the Privacy Commissioner confirmed that Canada Computers has filed a breach report and that officials are ensuring the company takes appropriate corrective action. York Regional Police also confirmed that an investigation is underway.
Canada Computers & Electronics, headquartered near Toronto, operates stores across British Columbia, Ontario, Quebec and Nova Scotia and specializes in pre-built and custom computers, along with related hardware and accessories.
