Security Affairs Weekly: Canadian Tire Breach Hits 38M Users, Iran Internet Blackout Continues

Weekly Security Roundup Highlights Major Breach and Infrastructure Disruption

Security Affairs has published its weekly newsletter Round 565, compiling significant cybersecurity developments from the international security landscape. The roundup highlights two major incidents demanding attention from security practitioners.

Canadian Tire Data Breach Affects Millions

Canadian retail giant Canadian Tire disclosed a 2025 data breach impacting approximately 38 million users. The scope of this incident places it among the largest retail data exposures in recent years, though specific details about the attack vector and compromised data types remain limited in the current reporting.

The breach represents a significant privacy incident for Canadian consumers, with the affected user count representing a substantial portion of Canada's population. Organizations should monitor for potential credential reuse attacks and advise users to review their Canadian Tire account activity.

Iran Internet Infrastructure Remains Severely Restricted

Iran's internet infrastructure continues to experience near-total blackouts amid ongoing civil unrest. The prolonged connectivity disruption represents one of the most extensive internet shutdowns globally, affecting both domestic communications and international connectivity.

These infrastructure restrictions demonstrate the vulnerability of centralized internet governance models and highlight the geopolitical weaponization of digital infrastructure. Security teams operating in regions with similar governance structures should evaluate contingency plans for sustained connectivity disruptions.

Analysis

Both incidents underscore critical themes in contemporary cybersecurity: the massive scale of modern data breaches and the increasing use of internet infrastructure as a tool of state control. The Canadian Tire incident reinforces the need for robust breach response procedures, while Iran's internet restrictions illustrate how digital infrastructure can become a battleground during periods of civil unrest.

Security practitioners should use these cases to evaluate their organizations' breach notification procedures and communications redundancy plans.

Sources

• Security Affairs newsletter Round 565 by Pierluigi Paganini – INTERNATIONAL EDITION