Giant Tiger breach sees 2.8 million records leaked

A vendor for Canadian retailer Giant Tiger was compromised in March 2024, and an alleged database containing over 2.8 million customer records (names, email addresses, phone numbers and, for some customers, street addresses) was posted for download on a hacker forum; Giant Tiger notified affected customers and said no payment data or passwords were involved. The report covers the scope of the leak, the company’s response, and consumer guidance on steps to mitigate risks such as changing passwords, enabling 2FA, and watching for phishing and identity fraud.