ShinyHunters Extorts Canada Life Following Employee Account Compromise
Learn More
The Canada Life, a major life and health insurer, reports a data breach on April 19, 2026. The incident is attributed to the criminal hacking and extortion group ShinyHunters.
Attackers used the stolen credentials of a single employee to access the insurer's workplace benefits and retirement division. On April 17, 2026, the ShinyHunters group issued a "final warning" on their dark web leak site, threatening to release exfiltrated data if a ransom was not paid by April 21, 2026. The group claims to have stolen over 5.6 million Salesforce records.
The company confirmed the following data was compromised:
- Full names
- Dates of birth
- Mailing addresses
- Gender
- Annual income levels
Canada Life reports that the incident affected 70,000 individuals.
The company launched a forensic investigation and hired third-party cybersecurity experts to secure its infrastructure. The insurer notified law enforcement authorities and the primary corporate client whose employees were most affected by the incident. To mitigate potential harm, the company is offering free credit monitoring and identity theft protection services to all impacted individuals.
