CIRO Data Breach Impacts 750,000 Canadian Investors
Summary
Hide ▲
Show ▼
The Canadian Investment Regulatory Organization (CIRO) confirmed that a data breach last year exposed personal information of approximately 750,000 Canadian investors. The breach, initially disclosed on August 18, 2025, was fully investigated by January 14, 2026. The compromised data includes dates of birth, phone numbers, annual income, social insurance numbers, government-issued ID numbers, investment account numbers, and account statements. CIRO emphasized that login credentials and account security questions were not affected. CIRO spent over 9,000 hours investigating the incident and found no evidence of misuse or dark web publication of the stolen data. To mitigate risks, CIRO will offer affected investors a free two-year credit monitoring and identity theft protection service.
Timeline
-
18.01.2026 17:17 1 articles · 6h ago
CIRO Data Breach Impacts 750,000 Canadian Investors
The Canadian Investment Regulatory Organization (CIRO) confirmed that a data breach last year exposed personal information of approximately 750,000 Canadian investors. The breach, initially disclosed on August 18, 2025, was fully investigated by January 14, 2026. The compromised data includes dates of birth, phone numbers, annual income, social insurance numbers, government-issued ID numbers, investment account numbers, and account statements. CIRO emphasized that login credentials and account security questions were not affected. CIRO spent over 9,000 hours investigating the incident and found no evidence of misuse or dark web publication of the stolen data. To mitigate risks, CIRO will offer affected investors a free two-year credit monitoring and identity theft protection service.
Show sources
- CIRO confirms data breach exposed info on 750,000 Canadian investors — www.bleepingcomputer.com — 18.01.2026 17:17
Information Snippets
-
CIRO is Canada’s national self-regulatory body for investment dealers, mutual fund dealers, and trading activity.
First reported: 18.01.2026 17:171 source, 1 articleShow sources
- CIRO confirms data breach exposed info on 750,000 Canadian investors — www.bleepingcomputer.com — 18.01.2026 17:17
-
The breach was initially disclosed on August 18, 2025, and the full investigation was completed on January 14, 2026.
First reported: 18.01.2026 17:171 source, 1 articleShow sources
- CIRO confirms data breach exposed info on 750,000 Canadian investors — www.bleepingcomputer.com — 18.01.2026 17:17
-
The compromised data includes dates of birth, phone numbers, annual income, social insurance numbers, government-issued ID numbers, investment account numbers, and account statements.
First reported: 18.01.2026 17:171 source, 1 articleShow sources
- CIRO confirms data breach exposed info on 750,000 Canadian investors — www.bleepingcomputer.com — 18.01.2026 17:17
-
CIRO found no evidence that the stolen data has been misused or published on the dark web.
First reported: 18.01.2026 17:171 source, 1 articleShow sources
- CIRO confirms data breach exposed info on 750,000 Canadian investors — www.bleepingcomputer.com — 18.01.2026 17:17
-
CIRO will provide affected investors with a free two-year credit monitoring and identity theft protection service.
First reported: 18.01.2026 17:171 source, 1 articleShow sources
- CIRO confirms data breach exposed info on 750,000 Canadian investors — www.bleepingcomputer.com — 18.01.2026 17:17