Customer data may be compromised after ‘malicious code’ embedded on LCBO site

The Liquor Control Board of Ontario says customer data may have been compromised after an unauthorized party embedded “malicious code” on its website.

The provincial Crown corporation had said Wednesday that it was investigating a cybersecurity incident that crashed its website and mobile app, both of which are available again.

In a statement Thursday, the LCBO says customers may have had their personal information compromised if they proceeded to the payment page on its website between Jan. 5 and Jan. 10.

Statement regarding LCBO’s cybersecurity incident and response. pic.twitter.com/OYcuOkxLj8

— LCBO (@LCBO) January 12, 2023

It says that could include names and credit card information, as well as email and mailing addresses.

People who started or completed payment for orders on LCBO.com during the affected time period are encouraged to monitor credit card statements for suspicious transactions.

Orders placed through the LCBO mobile app or vintagesshoponline.com were not affected.

READ MORE: LCBO investigates cybersecurity incident crashing its website, mobile app