Loblaw Companies Limited notified customers on March 10, 2026, that it is investigating a data breach after detecting suspicious activity on a contained, non-critical portion of its IT network.

Key Details of the Breach

• Data Compromised: A criminal third party accessed basic customer contact information, including names, phone numbers, and email addresses.
• Information Not Impacted: Current investigations indicate that passwords, health information, and credit card data were not compromised.
• PC Financial: The company stated that its financial services brand, PC Financial, was not impacted by this incident.

Immediate Actions for Customers

As part of its security response, Loblaw has taken several steps that affect users:

• Mandatory Logout: All customers have been automatically logged out of their accounts across digital services, including the PC Optimum app and other platforms using PCid.
• Re-authentication: To regain access, customers must log back in to their accounts.
• Security Recommendation: While not strictly required, some security experts advise that customers change their passwords as a precautionary measure.

The company, which operates major banners like Loblaws, No Frills, Real Canadian Superstore, and Shoppers Drug Mart, noted that the incident is not expected to impact its overall financial performance.