Quebec pot buyers not hit by data breach

A data breach at Canada Post that revealed personal information about customers of the online-only Ontario Cannabis Store did not affect people who made online orders from the Société québécoise du cannabis, the postal service said on Wednesday. The breach was specific to the OCS, it said. SQDC spokesperson Mathieu Gaudreault said it had received assurances from Canada Post that Quebecers were not affected by the breach and that it was still in communication with the postal service to ensure the issues that led to the breach had been fixed. Canada Post acknowledged the data breach earlier on Wednesday. The move came after the OCS notified affected customers and said it had “encouraged” Canada Post to take immediate action to notify its customers. “Limited delivery information from approximately 4,500 customer orders had been accessed by an individual OCS customer through our website using OCS reference numbers,” it said. “We are confident that the customer who accessed the information only shared it with Canada Post and deleted it without distributing further.” According to the OCS, the compromised information included postal codes and the names or initials of the person who accepted delivery of the marijuana. It said the breach occurred when an individual used the Canada Post tracking tool to access delivery data, and also potentially affected customers of other Canada Post clients.