Canada Goose customers’ purchase histories, contact details and partial card numbers published
A published Canada Goose customer dataset contained about 920,000 records and 582,000 email addresses, including purchases and partial card details. The company found no evidence its own systems were breached. Watch for convincing order-related scams.
Check your email address with Have I Been Pwned. Treat unexpected messages about Canada Goose purchases, refunds or payments cautiously and contact the retailer through its website yourself. Monitor card statements and report unfamiliar charges to your bank.
What’s happening
Historical Canada Goose customer transaction data was published in February 2026. Have I Been Pwned counted approximately 920,000 records and 582,000 unique email addresses, with names, phone numbers, addresses, purchases and partial card details. BleepingComputer also found device information and, in some records, the first six card digits alongside the last four. Canada Goose said it found no evidence its own systems were breached or unmasked financial data was exposed. The original intrusion date remains unclear: HIBP lists July 2025 but reports an August 2025 third-party breach explanation from Canada Goose; BleepingComputer attributed that explanation to ShinyHunters and could not verify it. The exposed purchase details could make impersonation scams more convincing, although the reviewed sources do not establish subsequent misuse. As at 3 November, no later confirmed investigation outcome or customer-notification update was found. There is no customer software update that removes the exposure.
- What
- Breach
- Affects
- Canada Goose customer transaction records
- Fixed in
- Nothing to patch
- Since
- 14 Feb 2026
- Closed
- 17 Feb 2026
Timeline
- Update
Have I Been Pwned added the exposure, reporting approximately 920,000 records containing 582,000 unique email addresses. It said the latest transaction in the dataset was dated July 2025.
- Update
Canada Goose told BleepingComputer it was reviewing the published historical dataset and had found no evidence of a breach of its own systems or exposed unmasked financial data. BleepingComputer’s sample review found contact details, purchase histories and partial card numbers.
- Made publicNothing to patch
ShinyHunters publicly claimed to have stolen more than 600,000 Canada Goose customer records, according to The Record’s subsequent report.
Sources
- Canada Goose investigating as hackers leak 600K customer records — includes Canada Goose’s statementBleepingComputer · 15 Feb 2026
- Canada Goose says leaked customer transaction data did not come from company systemsThe Record · 17 Feb 2026
- Canada Goose Data BreachHave I Been Pwned · 17 Feb 2026
- Canada Goose Data BreachMozilla Monitor · 17 Feb 2026