Canada Computers Notifies Customers of Web-Based Data Theft Incident
Learn More
Canada Computers reports a cyberattack in which attackers exploited a web-based vulnerability to plant infostealing malware on the company's checkout pages. The skimming script captured sensitive information as users type it into web forms.
Security researchers and customers found evidence of this script on the site as early as December 2025, though the company only acknowledged the breach in late January 2026 after media inquiries. The exposed data includes:
- First and last names
- Email addresses
- Credit card numbers
The number of affected individuals and the financial value of the stolen data are not disclosed. Canada Computers stated it has since vetted its systems and added new security layers to mitigate the vulnerability.
However, customers on platforms like Reddit reported fraudulent charges on their credit cards shortly after shopping at the retailer, contradicting the company's claim that it found no evidence of fraud.
The company's response has faced criticism due to a perceived delay in addressing the flaw. Users reportedly tried to warn the retailer about the vulnerability twice through support tickets, but staff closed the tickets without investigating.
