Canada Computers & Electronics is facing significant scrutiny following a data breach that has affected nearly 1,300 customers. Customers have expressed frustration over the company’s handling of the situation and their communication regarding it.
Data Breach Details
The incident, which was discovered on January 22, 2023, involved unauthorized access to the system supporting Canada Computers’ retail website. It compromised personal information, including credit card data.
Customer Notifications
- On January 25, 2023, affected customers were notified of the breach.
- Canada Computers stated that 1,284 customers were impacted.
- Some customers initially received incorrect notifications and were later informed they had not been affected.
Eric Pimentel and Brad Seward, who both received confusing messages from the company, were among those who canceled their credit cards as a precaution. Pimentel commented on the lack of confidence he feels in the company’s data security measures.
Root Cause and Response
The breach primarily impacted customers who used the guest checkout option between December 29, 2022, and January 22, 2023. Canada Computers admits to a miscommunication regarding the initial notifications sent to affected and non-affected customers.
Company Actions
- Canada Computers took immediate measures to contain the breach.
- They notified relevant authorities and launched an internal investigation.
- As part of their response, the company is offering two years of credit monitoring and identity theft protection to affected customers.
Industry Insights
Experts highlight that cybersecurity breaches often go unnoticed for extended periods. Terry Cutler, CEO of Cyology Labs, noted that breaches can take an average of 241 days to identify and contain. Meanwhile, customers have raised concerns about whether their prompt notifications were a result of their vigilance or internal detection.
Canada Computers operates over 30 stores across Canada and is not a small business, which raises expectations for transparency and security. The ongoing investigation aims to reassure customers and prevent future incidents.
