Save-On-Foods loyalty program members had personal information accessed in cybersecurity breach

CBC reports that Save-On-Foods says it discovered unauthorized activity on one of its servers on Oct. 13, which was "quickly contained"[1].According to the Prince George Citizen, the company's email to customers said it "took immediate action that day to shut down the server and launch an investigation with a third-party cybersecurity expert."[2]CBC says customers were told that their names and — if provided — addresses, phone numbers, email addresses and dates of birth were accessed[1]. The email also said that "based on the information available," no other personal information, such as credit card data or passwords, was accessed[1].Global News reports that the More Rewards program runs at Save-On-Foods, Buy-Low Foods, PriceSmart Foods and Nesters stores[3].CBC says it asked Save-On-Foods how many customers were affected in the data breach but did not receive a number by deadline[1].CBC cites the Canadian Centre for Cyber Security as saying that personal information can be used by cybercriminals to make phishing attacks more convincing[1]. According to CBC, Save-On-Foods says it will not send any communications asking for passwords, banking information, payment information, social insurance numbers or security question answers[1].The Times Colonist quotes Save-On-Foods as saying, "We take our responsibility to protect personal information seriously and regret any inconvenience this may cause."[4] CBC reports that the company notified the appropriate authorities and privacy regulators[1].