Canadian marketing company hit by data breach, says Ontario liquor board

Share post:

A Canadian marketing company that counts some of the country’s biggest corporations as its customers has been hit by a data breach.

One of them is the Liquor Control Board of Ontario (LCBO), a Crown corporation that sells spirits and wine in stores across the province. In an email sent to customers today, the board said it was told on Aug. 9 by Toronto-based Conversion Digital that it was recently hit by a data breach, with data of LCBO customers it holds accessed by a hacker.

The LCBO uses Conversion Digital to send promotional emails and newsletters to subscribers. The data copied consisted primarily of first name and email address of certain email subscribers, the LCBO said in its notification. But if the subscriber chose to enter other information into an email registration form, the stolen data could also have included date of birth, postal code and their Aeroplan number.

No customer password or financial information was involved, the LCBO said, nor were its IT systems compromised.

Asked for comment, the LCBO said an official wasn’t available for an interview. The spokesperson didn’t say how many subscribers were affected.

A request for comment was left with Conversion Digital. IT World Canada had received no reply by publication time.

Among the clients listed on Conversion Digital’s web page are one of Canada’s biggest banks, a professional sports team conglomerate, and an e-commerce provider.

The company doesn’t only email corporate messages. According to the Conversion DigitalĀ  website, for the LCBO it had created myLCBO, a personalized recommendation and recipe pairing email program. It segments customers by their loyalty card (originally Air Miles, now Aeroplan) purchases and is deployed biweekly, with personalized recommendations, recipe pairings, additional video and informational content. For this project, Conversion Digital also does the data analytics, designs and deploys emails, and provides biweekly reporting to the LCBO.

The LCBO said in its message to subscribers that it has temporarily suspended promotional emails until the investigation of the breach is complete.

Marketing and media companies are prime targets for hackers because they hold large databases of email addresses. In January, Mailchimp said a hacker accessed the accounts of 133 of its business customers after an employee or contractor fell for a social engineering attack. Each of those customers would have had an email contact or subscriber list that Mailchimp would use for sending email messages.

TechCrunch reported that, as a result of that breach, e-commerce plugin WooCommerce notified customers that their names, email addresses and store web addresses were stolen.

The January theft followed two 2022 data breaches at Intuit-owned Mailchimp.

Founded in 2010, Conversion Digital says on its website that it runs 750 email campaigns a year involving more than 1 billion messages.

The post Canadian marketing company hit by data breach, says Ontario liquor board first appeared on IT World Canada.
Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of and Computing Canada. An IT journalist since 1997, I've written for and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times.


Related articles

Security research team claims to have helped avert a major supply chain attack

JFrog Security Research team continuously scans public repositories such as Docker Hub, NPM, and PyPI to identify malicious...

Phishing attacks on state and local governments surge by 360%

Phishing attacks targeting state and local governments have surged by 360% between May 2023 and May 2024, according...

What is Ticketmaster saying to its customers?

Here's the letter that has been sent out out to Ticketmaster clients that a reader sent to me....

Cyber Security Today, July 8, 2024 – New ransomware group discovered, and summer podcast break starts

A new ransomware group is discovered. Welcome to Cyber Security Today. It's Monday July 8th, 2024. I'm Howard Solomon,...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways