Huge data breach reveals info on 750,000 investors - here's what we know, and how to see if you're affected

• CIRO breach exposed sensitive data of 750,000 Canadian investors
• Hackers stole personal details but not passwords or PINs
• CIRO offers two years of free credit monitoring and identity protection

The 2025 cyberattack at the Canadian Investment Regulatory Organization (CIRO) affected roughly 750,000 Canadians, it has now confirmed.

Founded in 2023, CIRO is Canada’s national self-regulatory body that oversees investment dealers, trading activity, and market integrity.

In mid-August 2025, CIRO disclosed a cyberattack and data breach, saying it was forced to shut down parts of its infrastructure and launch an 'extensive forensic investigation' to better understand what happened.

CIRO protects its ...