Canada’s Investment Regulator Investigates Cyber Incident, Data Exposure Confirmed

CIRO detected and contained a cybersecurity incident on August 11, 2025, temporarily shutting down portions of its IT environment; preliminary investigations indicate some personal and registration data of member firms and registered employees were impacted, while investor holdings are not believed to be at risk. CIRO has engaged internal and external cybersecurity and legal experts and law enforcement, will notify affected individuals once identified, and has implemented additional security measures and mitigation services.