Canadian investment regulator breach exposes data on around 750,000 investors
The Canadian Investment Regulatory Organization said a breach in 2025 affected information on around 750,000 investors. A lengthy investigation established the extent of the breach, and notification of those affected began. An $8.3 million settlement was subsequently put forward for court approval.
Key facts
- Affected organisation
- Canadian Investment Regulatory Organization
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Information on around 750,000 investors
- Cause / method
- External hacking
- Location
- Canada
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It was disclosed that a breach at the Canadian Investment Regulatory Organization had affected around 750,000 investors.
- It was disclosed that a lengthy investigation had established the extent of the breach and that notification of those affected had begun.
- An $8.3 million settlement relating to the data breach was put forward for court approval.
5 related reports
- 750,000 Impacted by Data Breach at Canadian Investment Watchdog
- Canadian investment regulator confirms hackers hit 750,000 investors
- CIRO confirms data breach exposed info on 750,000 Canadian investors
- CIRO Data Breach Exposes Sensitive Information of 750,000 Canadian Investors in Major 2025 Cyberattack
- CIRO data breach settlement of $8.3 million proposed for court approval
Other incidents at Canadian Investment Regulatory Organization
CIRO breach exposes personal data of financial industry figures
Impact: Personal information of senior investment and banking executives
A data breach at the Canadian Investment Regulatory Organization exposed personal information of senior executives in the investment and banking industries. Financial advisory firms became more wary after the incident, and class actions were pursued in January and February 2026.
Related reports: 4 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.