CIRO Confirms Data Breach – 750,000 Canadian Investors Have been Impacted

CIRO disclosed a large-scale targeted phishing-related breach affecting roughly 750,000 Canadian investors, exposing sensitive PII including dates of birth, phone numbers, annual income, social insurance numbers, government IDs, investment account numbers, and account statements. CIRO reports that account login credentials were not accessed, engaged third-party forensics, notified law enforcement and privacy authorities, and is providing two years of credit monitoring and identity protection; no evidence of misuse or dark-web exposure was reported at the time of the announcement.