SHINYHUNTERS has published over 600,000 Canada Goose customer records on its data leak site, claiming to have stolen 1.67 GB of data including order information, names, emails, addresses, partial card data, device and browser information, and purchase history. Canada Goose has stated that it did not suffer a breach of its own systems and told BleepingComputer that the leaked data appears linked to past customer transactions. “At this time, we have no indication of any breach of our own systems.
We are currently reviewing the newly released dataset to assess its accuracy and scope and will take any further steps as may be appropriate,” the firm said to BleepingComputer, adding that there is no evidence that unmasked financial data was involved. ShinyHunters’ post on its Tor data leak site describes the leak of 1.67 GB of data allegedly stolen from Canada Goose and includes more than 600k records. The company is investigating the claims to determine how many customers may be affected and to notify them.
The article notes that ShinyHunters has previously claimed responsibility for the Figure breach, linking that incident to a separate data theft narrative.