Save-On-Foods Reports More Rewards Data Breach
A security incident at the grocery chain exposed personal information for millions of loyalty program members.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust that companies sufficiently protect the personal data collected through their loyalty programs?
Save-On-Foods has confirmed a cybersecurity breach involving its More Rewards loyalty program. Unauthorized access to a company server resulted in the exposure of personal details for a portion of the programs 3.5 million members.
Why it matters
The incident highlights the growing risks faced by retail loyalty databases, which frequently store sensitive consumer contact and demographic information. This breach underscores the importance of robust server security to protect against unauthorized digital intrusions.
The More Rewards loyalty program serves over 3.5 million members across the country. The exposed dataset includes names, addresses, phone numbers, email addresses, and birth dates, though the company confirmed that passwords and credit card details remain secure.
The players
Save-On-Foods
Save-On-Foods is a major Canadian supermarket chain that operates throughout Western Canada.
More Rewards
More Rewards is a loyalty program that allows customers to earn points on purchases at participating retailers.
The details
Save-On-Foods identified unauthorized activity on one of its servers and subsequently engaged cybersecurity experts to contain the incident. The company has officially notified provincial privacy regulators in Canada regarding the exposure of member information.
Timeline
October 13, 2026: Unauthorized activity was first identified on a Save-On-Foods server.
The Tech Race
This breach mirrors a documented trend of unauthorized access events involving retail loyalty databases monitored by the Office of the Privacy Commissioner of Canada. As loyalty programs increasingly centralize consumer data, they become high-value targets in the broader cybersecurity arms race.
Loyalty program members should remain vigilant for phishing attempts or unsolicited communications that may use the compromised contact information. While payment data remains secure, users are encouraged to update their account details and monitor for any suspicious activity.
The takeaway
Customers should treat this event as a reminder to practice good digital hygiene by using unique, complex passwords across all retail accounts. Regularly reviewing your account privacy settings can help minimize the impact of future data exposures.
Further reading
For more information on national digital security trends, visit our Cybersecurity section.
Live Poll
Do you trust that companies sufficiently protect the personal data collected through their loyalty programs?
