Data breach
Canada Life data breach
In 2026, Canada Life suffered a data breach affecting 274,922 records. Exposed data included names, surname, email addresses and 6 other types of data.
Breach date
274 922
Records in the breach
9
Types of data exposed
Were you affected by the Canada Life breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Canada Life breach
- Names
- Surname
- Email Addresses
- Phone Numbers
- Addresses
- Employment Information
- Income Information
- Gender
- Date of Birth
About the breach
In April 2026, Canada Life suffered a data breach after the criminal extortion group ShinyHunters gained unauthorized access to internal applications and a Salesforce CRM environment via a single compromised employee account.
Key Details of the Breach
• What Happened: The attackers carried out a "pay or leak" extortion campaign, later publishing or listing stolen data sets publicly.
• Number of People Affected: Initial estimates and company statements indicated the incident impacted up to 70,000 individuals (mostly employees and members tied to a large corporate group benefits and retirement plan), though monitoring platforms like Have I Been Pwned indexed roughly 237,800 affected addresses/records.
• Types of Data Exposed:
• Names, email addresses, phone numbers, and physical mailing addresses
• Salutations, job titles, and customer support ticket records
• In some reports or subsets, additional details such as dates of birth, gender, and annual income were noted.
• Note: Canada Life stated that core sensitive items like Social Insurance Numbers (SINs), banking details, and medical records were not part of the exposed data set.
• Containment and Response:
• Canada Life announced on May 7, 2026, that the incident had been fully contained with the help of third-party cybersecurity experts, and no ongoing unauthorized activity was detected.
• The company directly notified affected individuals and offered them complimentary credit monitoring protection.
• Canada Life and security analysts warned stakeholders to stay vigilant against phishing scams and fraudulent "signature required" or policy-hold alerts that frequently target victims after a public data release.
Key Details of the Breach
• What Happened: The attackers carried out a "pay or leak" extortion campaign, later publishing or listing stolen data sets publicly.
• Number of People Affected: Initial estimates and company statements indicated the incident impacted up to 70,000 individuals (mostly employees and members tied to a large corporate group benefits and retirement plan), though monitoring platforms like Have I Been Pwned indexed roughly 237,800 affected addresses/records.
• Types of Data Exposed:
• Names, email addresses, phone numbers, and physical mailing addresses
• Salutations, job titles, and customer support ticket records
• In some reports or subsets, additional details such as dates of birth, gender, and annual income were noted.
• Note: Canada Life stated that core sensitive items like Social Insurance Numbers (SINs), banking details, and medical records were not part of the exposed data set.
• Containment and Response:
• Canada Life announced on May 7, 2026, that the incident had been fully contained with the help of third-party cybersecurity experts, and no ongoing unauthorized activity was detected.
• The company directly notified affected individuals and offered them complimentary credit monitoring protection.
• Canada Life and security analysts warned stakeholders to stay vigilant against phishing scams and fraudulent "signature required" or policy-hold alerts that frequently target victims after a public data release.
How to protect yourself
In order to protect yourself, we recommend the following:
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.
2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.
3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.
2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.
3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.