A data breach at Tiffany & Co. is under investigation by the **Office of the Privacy Commissioner of Canada** after the company reported the incident. The breach, which occurred in **May** but was only discovered in **September**, has impacted Canadian and U.S. customers, though the exact number of affected accounts remains unclear. The privacy commissioner is reviewing Tiffany & Co.’s response to ensure adequate measures are taken to protect the compromised personal information of Canadians. A formal breach report was submitted to the **Maine attorney general**, indicating potential exposure of customer data. The nature of the breach suggests unauthorized access to personal information, though specific details—such as whether financial data, contact information, or other sensitive records were leaked—have not been disclosed. The incident is still under regulatory scrutiny, with authorities assessing compliance and next steps to mitigate risks for affected individuals.
TPRM report: https://www.rankiteo.com/company/office-of-the-privacy-commissioner-of-canada
"id": "off1002510091825",
"linkid": "office-of-the-privacy-commissioner-of-canada",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Luxury Jewelry/Retail',
'location': ['Canada', 'United States'],
'name': 'Tiffany & Co.',
'type': 'Corporation'}],
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High (personal information)',
'type_of_data_compromised': 'Personal information (details '
'unspecified)'},
'date_detected': '2025-09',
'date_publicly_disclosed': '2025-09-17',
'description': 'A data breach at Tiffany & Co. is under review by the Office '
'of the Privacy Commissioner of Canada (OPC). The OPC is '
'ensuring the jewelry company is taking adequate steps to '
'address the breach and protect the personal information of '
'Canadians. The breach was reported to the OPC, and a letter '
'filed with the Maine attorney general indicates it occurred '
'in May 2025 and was discovered in September 2025. The breach '
'also appears to have affected the United States, though the '
'number of impacted Canadian accounts remains unclear.',
'impact': {'brand_reputation_impact': 'Potential (under review)',
'data_compromised': True,
'identity_theft_risk': 'Potential (personal information of '
'Canadians affected)',
'legal_liabilities': 'Under review by the Office of the Privacy '
'Commissioner of Canada and Maine attorney '
'general'},
'investigation_status': 'Under review by the Office of the Privacy '
'Commissioner of Canada',
'references': [{'date_accessed': '2025-09-17', 'source': 'The Canadian Press'},
{'date_accessed': '2025-09-17',
'source': 'Winnipeg Free Press'},
{'source': 'Office of the Privacy Commissioner of Canada (OPC) '
'Breach Report'},
{'source': 'Maine Attorney General Breach Letter'}],
'regulatory_compliance': {'legal_actions': 'Under review by the Office of the '
'Privacy Commissioner of Canada '
'and Maine attorney general',
'regulatory_notifications': ['Office of the Privacy '
'Commissioner of '
'Canada',
'Maine attorney '
'general']},
'response': {'incident_response_plan_activated': True,
'remediation_measures': 'Under review by the Office of the '
'Privacy Commissioner of Canada'},
'title': 'Data Breach at Tiffany & Co.',
'type': 'Data Breach'}