Canada Goose Data Breach
Gravity Score
ModerateCalculated based on the types of data exposed (8 categories) and the volume of affected records (581,877).
In February 2026, a data breach allegedly containing data relating to Canada Goose customers was published publicly. The data contained 920k records with 582k unique email addresses and included names, phone numbers, IP addresses, physical addresses and partial credit card data, specifically card type and last 4 digits. Canada Goose advised that the data "appears to relate to past customer transactions" and stated that it originated from a breach at a third party in August 2025. The most recent transaction date in the data is July 2025.
Exposed data
Affected website
canadagoose.com
What to do now
What can we learn from this breach?
Breaches like this offer valuable lessons for the entire industry. Some security practices that help protect data at scale include: implementing payment data tokenization and ensuring PCI DSS compliance; encrypting sensitive personal data at rest with properly managed encryption keys; segmenting and isolating databases so that a single breach doesn't expose all records; conducting regular security audits and penetration testing. Information security is an ongoing process, and each incident reinforces the importance of investing in data protection.
Was your data exposed?
Check now if your email appears in this breach. It's free, takes 30 seconds and requires no signup.
Check my email
