The largest retailer of alcoholic beverages in Canada, the Liquor Control Board of Ontario (LCBO), disclosed that unidentified attackers had entered its website through a security hole and injected malicious code that was intended to collect customer and credit card information at the point of sale.
Customers may have had their information compromised if they entered personal information on our check-out pages and continued to our payment page on LCBO.com between January 5, 2023, and January 10, 2023.
The compromised information includes customers' names, email and mailing addresses, credit card information, Aeroplan numbers, and LCBO.com account passwords.
Customers who placed orders using the smartphone app or the vintagesshoponline.com online store were unaffected.
Liquor Control Board of Ontario investigated the incident and notified the impacted individuals.
"id": "LCB171625223",
"linkid": "lcbo",
"type": "Data Leak",
"date": "01/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"