Nov. 7, 2018 ( Courtesy of citynews.ca) – The Ontario Cannabis Store (OCS) said the shipping information of some of its customers was accessed by an outside source through the Canada Post delivery tracking tool.
In a letter sent to the customers on Wednesday, the OCS said it was notified by Canada Post on Nov. 1 that the data for two per cent of customer orders, or about 4,500 orders, had been accessed by an individual.
That information includes postal codes, the name or initials of the person who signed for the order upon delivery, the date of delivery, the OCS reference number and the Canada Post tracking number.
The delivery address, payment information and contents of the order were not accessed, the OCS said.
“Since November 1, the OCS has worked closely with Canada Post to identify the cause of this issue and to prevent any further unauthorized access to customer delivery information,” CEO Patrick Ford said in the letter.
In a statement released to CityNews, Canada Post acknowledged the breach, saying “both organizations have been working closely together since that time to investigate and take immediate action.
“As a result, important fixes have been put in place by both organizations to prevent any further unauthorized access to customer information.
“We have also shared with OCS that we are confident that the customer who accessed the information only shared it with Canada Post and deleted it without distributing further.”
Canada Post said it has notified both the Federal Privacy Commissioner and the Ontario Information and Privacy Commissioner of the issue.
At the time of publication the Canada Post online tracking tool is down referring customers to their Twitter page:
Upon visiting the suggested twitter page no mention of either the breach or online tracking tool being down is mentioned. Rather the account focuses on the ongoing rolling strikes leading some users to vent their frustration.
Canadian Fraud News will update this article as new information becomes available.