CIRO Confirms Data Breach Impacting 750,000 Canadian Investors 

CIRO disclosed a large-scale data breach affecting about 750,000 Canadian investors after a targeted phishing campaign; exposed information includes dates of birth, phone numbers, annual income, social insurance numbers, government-issued IDs, investment account numbers, and account statements. CIRO reports no evidence of credential compromise or dark-web sale to date, engaged third-party forensic investigators, notified regulators and law enforcement, and is offering two years of credit monitoring while committing to strengthen cybersecurity controls.