Canadian retail chain Giant Tiger disclosed a data breach in March 2024.
A threat actor has now publicly claimed responsibility for the data breach and leaked 2.8 million records on a hacker forum that they claim are of Giant Tiger customers.
“In March 2024, the Canadian discount store chain Giant Tiger Stores Limited… suffered a data breach that exposed over 2.8 million clients,” states the threat actor.
The stolen data in the dump, claims the threat actor, additionally includes the “Website activity” of Giant Tiger customers.
“On March 4, 2024, Giant Tiger became aware of security concern related to a third-party vendor we use to manage customer communications and engagement,” a Giant Tiger spokesperson told BleepingComputer.
HaveIBeenPwned is a free online service that allows users to check if their data was compromised in known data breaches.
