Loblaw cybersecurity incidents and threat signals

Mar 10, 2026Ransomware

High

Loblaw Companies Limited Discloses Data Breach Affecting Customer Information

Written by Ilaria Sangalli , Nasdaq Index Insights Team , Nasdaq Index Research & Insights According to Statista, revenue in the cybersecurity market is expected to grow to $211.7 billion in 2026, with an annual growth rate of 7.7% 1 . The security services 2 segment is expected to contribute $106.1 billion to the total revenues, with the rest from cyber solutions. 3 , 4 During the period 2026 - 2030, revenue is expected to show an annual growth rate of 5.8% resulting in a total market size of $265.2 billion by 2030. 5 Region - wise, the largest market for cybersecurity, the U.S. is expected to have a market size of $93.0 billion in 2026. According to a U.S. intelligence assessment, Iran and its proxies pose a potential threat of targeted attacks on the United States. In the short term, this risk is expected to materialize primarily through low‑level cyber‑activity by Iran‑aligned “hacktivists” against U.S. networks, including website defacements and distributed denial‑of‑service attacks. 6 According to Fitch Ratings, U.S. public finance issuers face elevated cyber risk because of the Iran conflict. Previous geopolitically motivated attacks on U.S. public finance entities primarily have targeted health care and utilities. Increased broad - base d retaliatory cyber intrusions also are likely. 7 In February 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive to secure Cisco SD - WAN systems, in response to a significant cyber threat targeting federal networks utilizing certain Cisco Systems and software. 8 In February 2026, OpenAI reached an agreement with the Defense Department to deploy its models in the agency’s network. 9 The deal with OpenAI comes following President Donald Trump’s announcement to all federal government agencies to cease using Anthropic’s AI tools. 10 Following the deal, CEO Sam Altman said on X, “Two of our most important safety principles are prohibitions on domestic mass surveillance and human responsibility for the use of force, including for autonomous weapon systems. The DoW (Department of War) agrees with these principles, reflects them in law and policy, and we put them into our agreement.” This suggests that the Pentagon agreed to Anthropic’s suggested restrictions with OpenAI’s models. 11 In February 2026, Anthropic has accused three Chinese AI firms (DeepSeek, Moonshot AI and MiniMax) of illicitly extracting capabilities from its Claude chatbot, in what was described as industrial - scale intellectual property theft. 12 OpenAI leveled similar charges in January 2026. According to Forrester (a global market research company), cybercrime operations from actors such as Russia, China, Iran, and North Korea is expected to expand in 2026. 13 This concern is echoed by Google’s annual Cybersecurity Forecast for 2026. 14 One area that Google sees as particularly vulnerable to Chinese attacks is the semiconductor sector, due to competition from rivals such as TSMC and American export restrictions. 15 Cybersecurity – Notable Ransomware Attacks and Breaches in Q1 2026 On March 12, Loblaw Companies Limited ( TSE: L ), the largest food and pharmacy retailer in Canada, announced that hackers breached a portion of its IT network and accessed basic customer information such as names, phone numbers, and email addresses. 16 On March 11, medical technology company Stryker (NYSE: SYK) was hit by a wiper malware attack claimed by Handala, an Iranian-linked and pro-Palestinian hacktivist group. Handala claimed to have stolen 50 terabytes (TB) of data before wiping tens of thousands of systems and servers across the company's network. Stryker was forced to shut down offices in 79 countries. 17 On March 11, Telus Digital, the Canadian digital services and business process outsourcing (BPO) arm of Canadian telecommunications provider Telus, confirmed that it was impacted by a security incident after threat actors ShinyHunters claimed to have stolen nearly 1 petabyte of data from the company in a multi-month breach. ShinyHunters demanded $65 million in exchange for not leaking the company's data. 18 On March 3, data analytics company LexisNexis Legal & Professional confirmed that hackers breached its servers and accessed some customer and business information. A threat actor named FulcrumSec leaked 2GB of files on various underground forums and sites. The company noted that the stolen information was old and consisted mostly of non-critical details. 19 On March 3, Dutch paint company AkzoNobel (AMS: AKZA) confirmed that hackers breached the network of one of its U.S. sites. After a data leak from the Anubis ransomware gang, a company spokesperson said that the intrusion was contained and the impact was limited. The published data contained confidential agreements with high-profile clients and other valuable information. 20 On February 24, Wynn Resorts (Nasdaq: WYNN) confirmed that a hacker stole employee data from its systems after the company was listed on the ShinyHunters extortion gang's data leak site. Wynn did not confirm if any ransom was paid but mentioned that the attackers deleted the stolen data, which indicated that a ransom may have been paid. 21 On February 24, the ShinyHunters extortion group published personal information that contained 12 million records allegedly stolen from CarGurus (Nasdaq: CARG). CarGurus is a publicly traded automotive research and shopping company that operates in the U.S., Canada, and the U.K. While the company did not release any official statement, a day after the breach, HaveIBeenPwned (HIBP), the data breach monitoring and alerting platform, added that the dataset was compromised. HIBP attempted to confirm the validity/authenticity of the leaked records before adding them. 22 On February 23, U.S.-based healthcare diagnostic company Vikor Scientific (Vanta Diagnostics) disclosed a data breach that compromised the personal information of 140,000 people. The Everest ransomware group took credit for the cyberattack and claimed to have stolen roughly 12GB of data. 23 On February 20, Japanese chip testing company Advantest Corporation (TSE: 6857) was targeted in a ransomware attack. The company investigated into any customer or employee data theft by the hackers. Advantest makes automatic test equipment for the semiconductor industry. It serves major chipmakers such as Intel, Samsung, and TSMC. 25 Key Facts: Loblaw Companies Limited Data Breach Target entity: Loblaw Companies Limited.