Canada Goose Investigates Data Leak of 600,000 Customer Records

ShinyHunters, a notorious data extortion group, has recently claimed responsibility for leaking over 600,000 customer records from Canada Goose. The dataset, which is 1.67 GB in size and released in JSON format, includes sensitive information such as customer names, email addresses, phone numbers, billing and shipping addresses, and partial payment card details. Canada Goose has confirmed that the dataset appears to relate to past customer transactions and has not found evidence of a breach of its own systems.

According to Canada Goose, the company is currently reviewing the dataset to assess its accuracy and scope. While the dataset does not appear to contain full payment card numbers, it includes enough information that could be exploited for targeted phishing, social engineering, and fraud. The records also contain purchase history and device information, which may allow attackers to profile high-value customers.

ShinyHunters has denied any connection between this data leak and recent social-engineering attacks targeting single sign-on (SSO) accounts. The group claims that the dataset originated from a breach of a third-party payment processor dating back to August 2025. However, the schema of the dataset resembles e-commerce checkout exports, suggesting a potential link to hosted storefront and payment processing platforms.

As a prolific data extortion group, ShinyHunters has been involved in numerous high-profile breaches and data theft incidents, often targeting e-commerce platforms and cloud environments. The stolen data is typically used for extortion or sold on underground forums. It remains unclear how many Canada Goose customers are affected or if they will be notified.

Implications for Customers and Organizations

This incident highlights the ongoing risks associated with data breaches and the importance of safeguarding customer information. Organizations should ensure they have robust security measures in place to protect sensitive data, especially when dealing with third-party vendors. Customers should remain vigilant and monitor their accounts for any suspicious activity.

Additionally, the nature of the leaked data suggests that customers may be targeted for phishing attempts. It is crucial for individuals to be cautious of unsolicited communications that request personal information or prompt them to click on links.