More Rewards customers’ data accessed in cybersecurity breach

More Rewards, the loyalty program used at Save on Foods and other Jim Pattison-owned grocery stores, says customers’ information was accessed in a cybersecurity incident this week. The company told CTV News it detected “unusual activity” on one of its servers on Tuesday, shut it down immediately and began an investigation.

On Friday, the company confirmed that personal information in the More Rewards database had been accessed. This included customers’ names and, where provided, their addresses, phone numbers, email addresses and dates of birth. Based on the information available, the company said no other personal information, such as passwords, credit card data or transaction history, was accessed. It said More Rewards accounts remain secure.

Some customers received emails on Friday telling them their information had been accessed and warning about possible scams. The emails said More Rewards would never ask for sensitive information, including passwords, verification codes, banking or payment card details, Social Insurance Numbers or answers to security questions. If a message that appears to come from More Rewards or anyone else asks for sensitive personal information, or asks a recipient to click an unexpected link or open an unexpected attachment, the company advises verifying the request through contact information known to be legitimate, rather than using contact details included in the request.

More Rewards said the incident is contained and that appropriate authorities and privacy regulators have been notified. The company said it takes its responsibility to protect personal information seriously and regrets any inconvenience the incident may cause. The program is used at Save On Foods, Buy Low Foods and Quality Foods on Vancouver Island in B.C., as well as at Save On Foods locations elsewhere in Western Canada. Asked by CTV News how many customers were affected, More Rewards did not provide a figure.