As previously shared, LCBO has experienced a cybersecurity incident affecting online sales through LCBO.com.
With a thorough review and testing of the website complete, including enhanced security and monitoring measures in place, LCBO.com and our mobile app have been restored and are fully operational.
At this time, we can confirm that an unauthorized party embedded malicious code into our website that was designed to obtain customer information during the checkout process. Unfortunately, customers who provided personal information on our check-out pages and proceeded to our payment page on LCBO.com between January 5, 2023, and January 10, 2023, may have had their information compromised. This could include names, email and mailing addresses, Aeroplan numbers, LCBO.com account password, and credit card information. This incident did not affect any orders placed through our mobile app or vintagesshoponline.com, nor was doingbusinesswithlcbo.com compromised.
We are continuing our investigation into the incident to identify the specific customers impacted so that we can communicate with them directly. Out of an abundance of caution, we recommend all customers who initiated or completed orders online during this window monitor their credit card statements and report any suspicious transactions to their credit card providers. We have also reset all LCBO.com account passwords. Registered customers will be prompted to reset their password on login.
LCBO is committed to providing a trusted online shopping experience and we value the security of all information that is entrusted to us. Not only do we thank our customers and employees for their patience and understanding at this time, but we also sincerely thank you, our valued partners, for your support and for being such strong ambassadors of our brand.
Further updates will be shared as able and our Merchandising and Marketing teams will be in touch regarding any relevant promotional updates.