Hacker claims Giant Tiger data breach, leaks 2.8M records online

Giant Tiger disclosed a March 2024 security incident in which a third-party vendor's data was accessed without authorization; a threat actor subsequently claimed responsibility and posted roughly 2.8 million customer records (emails, names, phone numbers, addresses and website activity) on a hacker forum, and the dataset was added to HaveIBeenPwned. The retailer says no payment information or passwords were involved, but exposed PII raises heightened risk of targeted phishing and identity theft for affected customers.