"Upon learning of this incident, the OCS immediately engaged the Office of the Information and Privacy Commissioner (IPC) of Ontario", the OCS said in a statement.
The mail agency has notified the federal and Ontario privacy commissioners.
Postal Code, name or initials of the individual who signed for the delivery, date of delivery, OCS reference number, Canada Post tracking number and OCS corporate name and business address, have all been compromised. "Although Canada Post is making its own determination as to whether notification of customers is required in this instance, the OCS has notified all relevant customers".
Canada Post is admitting to a privacy breach involving thousands of Ontario's online cannabis customers.
In a privacy update on its website, the OCS said the breach late on November 1 affected about two per cent of its customer orders, and information was accessed by a person using a Canada Post delivery tracking tool.
According to said statement, no other details were accessed, and the OCS website was not impacted.
Capping off a string of issues, including delivery delays and mislabeled products, the Ontario Cannabis Store (OCS) has now confirmed that the details of approximately 4,500 orders have been accessed through Canada Post's delivery tracking tool.
OCS is demanding Canada Post gain written assurances from the individual who accessed the information that it has not been shared and that it will be deleted. But Canada Post could not explain how they verified that only one person had accessed the data.
The OCS says that "Canada Post has not taken action in this regard", though the company says it has contacted all affected customers.
"As a result, important fixes have been put in place by both organizations to prevent any further unauthorized access to customer information", the Crown corporation said.
Ontario's Privacy Commissioner, Brian Beamish, called the breach "unfortunate" but said it appeared the risk to customer data was limited. Mr.
Given the vulnerability occurred through Canada Post, Mr.
In answer to an opposition question on Wednesday, Prime Minister Justin Trudeau told the House of Commons the breach was fixed and would not be repeated.