- CIRO breach exposed sensitive data of 750,000 Canadian investors
- Hackers stole personal details but not passwords or PINs
- CIRO offers two years of free credit monitoring and identity protection
The 2025 cyberattack at the Canadian Investment Regulatory Organization (CIRO) affected roughly 750,000 Canadians, it has now confirmed.
Founded in 2023, CIRO is Canada’s national self-regulatory body that oversees investment dealers, trading activity, and market integrity.
In mid-August 2025, CIRO disclosed a cyberattack and data breach, saying it was forced to shut down parts of its infrastructure and launch an ‘extensive forensic investigation’ to better understand what happened.
CIRO protects its customers
The investigation is wrapped up, and found approximately 750,000 Canadian investors have had sensitive data exposed by the hackers, including dates of birth, phone numbers, annual income, social insurance numbers, government issued ID numbers, investment account numbers and account statements.
CIRO said that its investigation into the matter was robust, as its investigators spent more than 9,000 hours looking into the matter.
The conclusion is that the data has not leaked on the dark web and has not been misused. Still, it provided all affected individuals with two years of free credit monitoring and identity theft protection services, which will definitely come in handy if those phishing emails start coming in.
Those who are affected by the breach will receive a direct email from CIRO, with instructions on how to sign up for the identity protection service. Those that don’t receive a notice can reach out to CIRO directly.
Via BleepingComputer
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!
And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.
