This should be invisible

lcbo cyber attack

LCBO advises customers to check their bank statements after 'malicious' cyber attack

The Liquor Control Board of Ontario (LCBO) has confirmed that it was targeted by hackers last week, joining a growing list of large companies and organizations forced to deal with serious cybersecurity threats in recent months.

Long story short: If you purchased anything from the LCBO's website between last Thursday, Jan. 5, and Tuesday, Jan. 10, an "unauthorized party" may have recorded your personal information — names, passwords, email addresses, mailing addresses, Aeroplan numbers and credit cards included.

"At this time, we can confirm that an unauthorized party embedded malicious code into our website that was designed to obtain customer information during the check-out process," announced the LCBO Thursday afternoon.

"Unfortunately, customers who provided personal information on our check-out pages and proceeded to our payment page on LCBO.com between January 5, 2023, and January 10, 2023, may have had their information compromised."

The incident did not impact orders placed through the LCBO's mobile app or online vintage shop, according to the liquor purveyor, but any customer who initiated or completed a payment using LCBO.com during the aforementioned period is advised to be cautious.

"We are continuing our investigation into the incident to identify the specific customers impacted so that we can communicate with them directly," said the provincial Crown corporation on Thursday.

"Out of an abundance of caution, we recommend all customers who initiated or completed payment for orders on LCBO.com during this window monitor their credit card statements and report any suspicious transactions to their credit card providers."

The good news for people who like to buy booze online is that the LCBO's website and mobile app are both back online and fully operational — with new enhanced security measures in place — after two days of downtime.

All LCBO account passwords have been reset, so you'll need to choose a new one upon your next login.

"Immediate steps were taken to contain the issue, including disabling customer access to both LCBO.com and our mobile app while we engaged with third-party experts to conduct a forensics investigation," explains the LCBO of why its website and app went offline on Jan. 10.

"LCBO is committed to providing a trusted online shopping experience. We value the security of all information that is entrusted to us and thank our customers, employees, and partners for their patience and understanding."

The liquor board is only the latest victim in what seems like an increasing amount of cyber attacks both locally and around the world.

Just a few weeks ago, The Hospital for Sick Children (SickKids) experienced a ransomware attack that took some of its systems completely offline, prompting it to declare a "Code Grey."

Toronto's University Health Network, which includes Toronto General Hospital, Toronto Western Hospital and the Princess Margaret Cancer Centre, followed suit on Monday on account of an unexplained "digital outage."

Lead photo by

Hector Vasquez


Join the conversation Load comments

Latest in Eat & Drink

Toronto cookware store that's been in business since 1981 permanently closing

TikTok of Ontario dairy farmers dumping milk shows what's being done to keep prices up

Toronto restaurant ranked the most beautiful views in Canada

Lockdown project founded by high school friends becomes successful Toronto shop

50 essential Mexican restaurants in Toronto you need to try at least once

Thai restaurant gets 9 infractions from Toronto health inspectors

Small Ontario grocery outlet chain sees big spike in business after TikTok shows low prices

The best things we ate last month in Toronto