CIRO breach exposes personal data of financial industry figures
A data breach at the Canadian Investment Regulatory Organization exposed personal information of senior executives in the investment and banking industries. Financial advisory firms became more wary after the incident, and class actions were pursued in January and February 2026.
Key facts
- Affected organisation
- Canadian Investment Regulatory Organization
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of senior investment and banking executives
- Cause / method
- Not confirmed
- Location
- Canada
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It was reported that the leaked data included personal information of senior executives in the investment and banking industries.
- Plans for a class action over the data breach were reported.
- Plans for a second class action over the data breach were reported.
4 related reports
Other incidents at Canadian Investment Regulatory Organization
Canadian investment regulator breach exposes data on around 750,000 investors
750kImpact: Information on around 750,000 investors
The Canadian Investment Regulatory Organization said a breach in 2025 affected information on around 750,000 investors. A lengthy investigation established the extent of the breach, and notification of those affected began. An $8.3 million settlement was subsequently put forward for court approval.
Related reports: 5 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.