Due to a weakness in Canada Post’s tracking website, the confidential personal information of 4,500 Ontario Cannabis Store customers has been breached.
On November 2, the CEO and president of the Ontario Cannabis Retail Corporation, Patrick Ford, sent a letter to the head of Canada Post that the affected persons be made aware at once.
“Through our internal investigation, we have learned that this Canada Post website vulnerability is not unique to OCS customers and that in fact could apply to any Canada Post customers through manipulation of tracking and/or reference numbers,” Ford said.
The Toronto Sun is reporting that an email went out to the affected customers on Wednesday.
According to a Canada Post statement, “limited delivery information” was accessed by a single OCS customer through website of Canada Post “using OCS reference numbers.”
Both organizations have been working closely since then to stop any more uncertified access.
The statement goes on to say “We have also shared with OCS that we are confident that the customer who accessed the information only shared it with Canada Post and deleted it without distributing further,”
The federal and Ontario privacy commissioners have been notified by Canada Post.
“Canada Post takes the privacy of information seriously and continues to work with OCS,” the mail agency said in their statement.
Ford said that the OCS has removed the reference numbers issued from the warehouse system to Canada Post. OCS anticipates that Canada Post will revamp their system to protect customer data.