Huge data breach reveals info on 750,000 investors - here's what we know, and how to see if you're affected

Date:
Mon, 19 Jan 2026 19:05:00 +0000

Description:
CIRO details what happened in 2025 data breach, including what kind of info was taken.

FULL STORY ======================================================================CIRO breach exposed sensitive data of 750,000 Canadian investors Hackers stole personal details but not passwords or PINs CIRO offers two years of free credit monitoring and identity protection

The 2025 cyberattack at the Canadian Investment Regulatory Organization
(CIRO) affected roughly 750,000 Canadians, it has now confirmed.

Founded in 2023, CIRO is Canadas national self-regulatory body that oversees investment dealers, trading activity, and market integrity.

In mid-August 2025, CIRO disclosed a cyberattack and data breach, saying it was forced to shut down parts of its infrastructure and launch an 'extensive forensic investigation' to better understand what happened. CIRO protects its customers

The investigation is wrapped up, and found approximately 750,000 Canadian investors have had sensitive data exposed by the hackers, including dates of birth, phone numbers, annual income, social insurance numbers, government issued ID numbers, investment account numbers and account statements.

Login details such as passwords , security questions, and PINs, were not stolen, CIRO said, but this still makes this breach quite dangerous. With all this information, cybercriminals can launch compelling phishing attacks, tricking victims into sharing those login credentials, and accessing their investment platform of choice.

CIRO said that its investigation into the matter was robust, as its investigators spent more than 9,000 hours looking into the matter.

The conclusion is that the data has not leaked on the dark web and has not been misused. Still, it provided all affected individuals with two years of free credit monitoring and identity theft protection services, which will definitely come in handy if those phishing emails start coming in.

Those who are affected by the breach will receive a direct email from CIRO, with instructions on how to sign up for the identity protection service.
Those that dont receive a notice can reach out to CIRO directly.

Via BleepingComputer

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the
Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/huge-data-breach-reveals-info-on-750-00 0-investors-heres-what-we-know-and-how-to-see-if-youre-affected


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)