SPS Law Group LLP has launched research for a potential class action regarding a data breach where sensitive and personal financial information was compromised following a cyberattack on the systems of the Canadian Investment Regulatory Organization (CIRO).
The data breach involved CIRO’s databases containing the personal profile information of approximately 750,000 Canadian investors. The breach, which was first detected on August 11, 2025, included highly sensitive data such as:
- Social Insurance Numbers (SIN)
- Dates of birth and phone numbers
- Annual income and investment account numbers
- Government-issued ID numbers
- Investment account statements
If you are an investor or registrant who believes your sensitive data was compromised in this breach, you can contact the CIRO dedicated cybersecurity incident call center at 1-833-489-8338 for those with specific questions regarding the impact on their personal information or the remediation services being offered.
If you received an email from ciro@notifications.cyberscout.com or a notification letter from the Canadian Investment Regulatory Organization (CIRO) about a data breach on or about January 2026, we would like to hear from you.
IF YOU WISH TO JOIN OUR CONTACT LIST FOR THIS CLASS ACTION, PLEASE COMPLETE THE BELOW FORM. (Please note, providing your contact information creates no financial obligation for you. You are not charged any fee or cost for joining the contact list for this class action, we are simply paid a contingency fee from the compensation recovered, if successful.)