In October 2025, Canadian Tire experienced a significant data breach impacting approximately 38 million customer accounts. The breach resulted in the exposure of personally identifiable information (PII), including names, email addresses, phone numbers, physical addresses, dates of birth, and encrypted passwords. No malware or specific attack tools have been identified, and the precise attack vector remains unconfirmed, though evidence suggests a configuration error or exploitation of an unknown vulnerability. All major claims in this report are corroborated by multiple independent sources, including Have I Been Pwned, Bitdefender, and OffSeq Threat Radar.