In a letter sent to customers, The Ontario Cannabis Store (OCS) acknowledges that they were made aware of a data breach by Canada Post on November 1st.
About 2% of orders had their information accessed by an individual. Information accessed includes postal codes, the name or initials of the person who signed for the order upon delivery, the date of delivery, the OCS reference number and the Canada Post tracking number.
The delivery address, payment information and contents of the order were not accessed, the OCS said.
“Since November 1, the OCS has worked closely with Canada Post to identify the cause of this issue and to prevent any further unauthorized access to customer delivery information,” CEO Patrick Ford said in the letter.
In a statement released to CityNews, Canada Post acknowledged the breach, saying “both organizations have been working closely together since that time to investigate and take immediate action.
“As a result, important fixes have been put in place by both organizations to prevent any further unauthorized access to customer information.
“We have also shared with OCS that we are confident that the customer who accessed the information only shared it with Canada Post and deleted it without distributing further.”
This breach affects approximately 4500 customers and deals another hard blow to the Ontario Cannabis Store which has been riddled with stock and fulfillment issues since day one.