Data breach involving shipping information for about 4500 OCS orders

Ontario Cannabis Store logo

Ontario Cannabis Store logo

Canada Post said it learned of the breach after an OCS customer contacted the postal service saying he had been able to access the information of other people's orders and urged Canada Post to review the situation.

In a letter sent to the customers on Wednesday, the OCS said it was notified by Canada Post on November 1 that the data for two per cent of customer orders, or about 4,500 orders, had been accessed by an individual.

According to Canada Post, an OCS customer accessed the information through the Canada Post website. The crown corporation states that it has worked closely with Canada Post to "identify the cause of the issue and to prevent further unauthorized access to customer delivery information". Other data such as the name of the person who made the order - unless the same person signed for delivery - the full delivery address or payment information were not affected, the OCS statement said.

The data breach impacted about two per cent of cannabis orders made since the site launched, the OCS said.

Names, or initials or people who signed upon delivery.

"We are pleased that OCS has notified their customers of the issue and will continue to work together to provide customers with assurance that this is being fully addressed", Canada Post said.

"The OCS is extremely concerned about the compromising of OCS customer data accessed through the Canada Post online tracking tool", he said. "As a result, important fixes have been put in place by both organizations to prevent any further unauthorized access to customer information". "We have also notified the Federal Privacy Commissioner and the Ontario Information and Privacy Commissioner".

Ontario's Privacy Commissioner, Brian Beamish, called the breach "unfortunate" but said it appeared the risk to customer data was limited. Mr.

The agency said they are confident the customer only shared the information with Canada Post and "deleted it without distributing further".

Ford said OCS expects Canada Post to re-engineer their systems to protect customers.