ShinyHunters Dumps 600K+ Canada Goose Customer Records on

600K Customer Records Posted to Dark Web

On February 14, the notorious data extortion group ShinyHunters posted 1.67 GB of data allegedly stolen from luxury outerwear brand Canada Goose on its Tor leak site. The dump contains over 600,000 customer records spanning multiple years of transactions.

Canada Goose denies a direct breach of its own systems, stating the dataset appears to relate to a third-party payment processor compromise dating back to August 2025.

What Was Leaked

Scope

• 600,000+ unique customer records
• 1.67 GB total dump size
• Data spans 2023-2025 transaction period
• Primarily North American customers

ShinyHunters: Track Record

ShinyHunters is one of the most prolific data extortion groups operating today, known for targeting retail and technology companies:

The group typically monetizes stolen data through direct sales on dark web marketplaces or by extorting victims for ransom payments to prevent public release.

Canada Goose's Response

Canada Goose issued a statement saying:

"We are aware of the claims and are investigating. Our preliminary assessment indicates the data does not originate from a direct breach of Canada Goose systems. The dataset appears to relate to past transactions processed through a third-party provider."

The company has engaged forensic investigators and notified relevant privacy authorities in Canada and the United States.

What Affected Customers Should Do

1. Monitor financial statements for unauthorized charges, especially on cards used at Canada Goose
2. Change passwords on Canada Goose accounts and any sites sharing the same credentials
3. Enable credit monitoring through services like TransUnion or Equifax
4. Watch for phishing — Exposed data makes targeted phishing highly likely
5. Consider a credit freeze if concerned about identity theft

Broader Implications

This breach highlights the growing risk of third-party supply chain compromises in retail. Even when a brand's own systems remain secure, data can be exposed through:

• Payment processors
• Logistics and shipping providers
• Marketing and analytics platforms
• Customer support platforms

Organizations should maintain data processing inventories and require breach notification clauses in all vendor contracts.

Sources

• BleepingComputer — Canada Goose Investigating as Hackers Leak 600K Customer Records
• Security Affairs — ShinyHunters Leaked 600K+ Canada Goose Customer Records
• The Register — Canada Goose Says ShinyHunters Only Breached Old Data