CIRO says about 750K people’s data affected by cybersecurity incident

Advertisement

Advertise with us

TORONTO - The Canadian Investment Regulatory Organization says about 750,000 Canadian investors may have had personal information compromised in a data breach last year. 

Read this article for free:

or

Already have an account? Log in here »

To continue reading, please subscribe:

Monthly Digital Subscription

$1 per week for 24 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $4.00 plus GST every four weeks. After 24 weeks, price increases to the regular rate of $19.95 plus GST every four weeks. Offer available to new and qualified returning subscribers only. Cancel any time.

Monthly Digital Subscription

$4.99/week*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $19.95 plus GST every four weeks. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

No thanks

*Your next subscription payment will increase by $1.00 and you will be charged $16.99 plus GST for four weeks. After four weeks, your payment will increase to $23.99 plus GST every four weeks.

TORONTO – The Canadian Investment Regulatory Organization says about 750,000 Canadian investors may have had personal information compromised in a data breach last year. 

According to CIRO, certain information like social insurance numbers, investment account numbers, phone numbers and more may have been impacted.   

CIRO says that at this time, there is no evidence that the information has been misused, but it will continue to monitor for potential malicious activity.  

The data breach was the result of a sophisticated phishing attack that was quickly contained, according to CIRO.

CIRO says it is reaching out to affected investors, and those affected will be sent a notification letter starting on Jan. 14. 

Andrew Kriegler, CIRO’s president and CEO, says the organization is intent on doing right by those investors that have been impacted, and it remains committed to strengthening its cybersecurity practices.  

CIRO is the self-regulatory organization for investment dealers, mutual fund dealers and debt and equity trading. 

This report by The Canadian Press was first published Jan. 14, 2026.

Report Error Submit a Tip

Business

LOAD MORE