What happened
The LockBit ransomware group claimed responsibility for the April 2024 attack on London Drugs. The company refused to pay the demanded ransom and stores were closed across British Columbia, Alberta, Saskatchewan, and Manitoba for approximately a week.
The attackers subsequently released files containing employee information, including some corporate head-office human-resources records. The BC and Alberta privacy commissioners opened investigations.
Reported impact: US$25M ransom demanded, refused
Source: OIPC BC, 28 Apr 2024.
What to do if you were affected
- If you are or were a London Drugs employee, place a fraud alert on your credit file.
- Monitor your bank and credit accounts for unusual activity.
- Update passwords on any account that shared credentials with your London Drugs work email.
- Watch for phishing emails referencing HR benefits or payroll.
- Consider a credit freeze via Equifax and TransUnion.
Common questions
When was the London Drugs breach disclosed?
In April 2024. Public reporting was carried by OIPC BC.
How many people were affected?
3,000,000 records, by the figure in the disclosure. Whether your own details were among them depends on your relationship with London Drugs at the time.
How do I check whether my address was in it?
Enter the address in the check above. We check that one address against monitored breach databases and show what was exposed and what to do first. No account needed.
Is the data still a risk years later?
Often, yes. Lists from old breaches keep being copied and reused, so a password from one can still be tried today. Changing it, and not reusing it, closes that door.
Other breaches in this sector
Dodo PizzaSep 2026 · 68,000,000 recordsTicketmasterMay 2024 · 560,000,000 recordsSnowflake customer credential-stuffing: AT&T 73M recordsApr 2024 · 73,000,000 recordsIndigo BooksFeb 2023 · 60,000 records
Is your address in a public breach? Check my address →