Canadian investment regulator confirms hackers hit 750,000 investors

CIRO confirmed a phishing-related data breach that impacted about 750,000 investors, potentially exposing sensitive personal information (dates of birth, phone numbers, annual income, SINs, government IDs, investment account numbers and statements). The organization says login credentials were not at risk, has found no evidence of misuse so far, is offering two years of credit monitoring, and is conducting ongoing monitoring and improvements to its cybersecurity defenses.