CIRO confirms data breach exposed info on 750,000 Canadian investors

CIRO disclosed a cybersecurity incident impacting about 750,000 Canadian investors where personal data—potentially including dates of birth, phone numbers, annual income, social insurance numbers, government-issued ID numbers, investment account numbers, and account statements—was exfiltrated; CIRO completed a forensic investigation, found no evidence of misuse, and is offering two years of free credit monitoring and identity theft protection to affected individuals.