Loblaw Data Breach – Hackers Accessed IT Network and Customer Information

Loblaw disclosed an ongoing investigation after an intrusion into a segmented, non-critical part of its IT network led to exfiltration of basic customer contact information (first/last names, phone numbers, and registered email addresses). The company reports no compromise of passwords, payment card data, or health/pharmacy records, has contained the affected network segment, forced user session expirations, and warned customers to expect increased phishing and smishing attempts.