OCS Experiences Major Data Breach
Published November 7, 2018 at 8:27 pm
It’s been a rocky couple of weeks for the newly launched OCS.
The Ontario Cannabis Store (better known as the OCS) has struggled with significant delivery delays (the Canada Post strike certainly came at an inopportune time) and disgruntled customers.
Now, the Ontario-run cannabis retailer is announcing a significant data breach.
The OCS says that on Nov. 1, the Canada Post Corporation notified it that “limited delivery information” of approximately 4,500 orders was accessed by an unauthorized individual through the Canada Post delivery tracking tool.
Delivery data shared with the OCS also included information relating to customers of other Canada Post clients.
“Upon learning of this incident, the OCS immediately engaged the Office of the Information and Privacy Commissioner (IPC) of Ontario,” OCS wrote in a statement. “Since Nov. 1, the OCS has worked closely with Canada Post to identify the cause of this issue and to prevent any further unauthorized access to customer delivery information.”
Videos
The OCS says Canada Post has not yet notified customers.
The information obtained through the breach includes:
- Postal Codes
- Name or initials of person who signed for delivery
- Date of delivery
- OCS reference numbers
- Canada Post tracking numbers
- OCS corporate name and business address
The OCS says no other order details were included, such as the name of the person who placed the order, the delivery address, payment information and contents of the order.
The OCS website has not been impacted.
The OCS has sent emails to customers it believes was affected by the breach.
Anyone with concerns should contact the OCS for more information.
insauga's Editorial Standards and Policies advertising