Data breach reference · July 2022

The Rogers Communications data breach

What was disclosed, and how to check whether your address was in it.

At a glance
Disclosed
8 July 2022
Records
12,000,000 (CRTC)
Type
Network outage / service disruption
Sector
General

Check whether your address was in it

No account needed. The address is used only to run the check. Privacy

This disclosure

What is on the record.

12,000,000
Records reported in the disclosure
1,562 days
Since the disclosure, 8 Jul 2022

Source: CRTC, as recorded in the LeakTrace tracker.

What happened

On July 8, 2022, a routing configuration change triggered a nationwide network failure at Rogers that took down wireless and wireline services, Interac payments, 911 access, and countless downstream services for most of a day.

Although not a breach in the exfiltration sense, the incident prompted regulatory scrutiny of Canadian carriers' cyber and operational resilience posture and remains a reference point for concentration-risk analysis. Rogers customer records were not disclosed to have been exposed, but the incident is often searched by customers concerned about their account security.

Reported impact: Multiple class-action lawsuits

Source: CRTC, 8 Jul 2022.

What to do if you were affected

  1. Review your Rogers account for unfamiliar changes or charges.
  2. Enable multi-factor authentication on your Rogers online account.
  3. Set up a port-out PIN with Rogers to protect against SIM-swap attacks.
  4. Do not respond to unsolicited communications claiming to be from Rogers support.

Common questions

When was the Rogers Communications breach disclosed?
In July 2022. Public reporting was carried by CRTC.
How many people were affected?
12,000,000 records, by the figure in the disclosure. Whether your own details were among them depends on your relationship with Rogers Communications at the time.
How do I check whether my address was in it?
Enter the address in the check above. We check that one address against monitored breach databases and show what was exposed and what to do first. No account needed.
Is the data still a risk years later?
Often, yes. Lists from old breaches keep being copied and reused, so a password from one can still be tried today. Changing it, and not reusing it, closes that door.

Other breaches in this sector

Dodo PizzaSep 2026 · 68,000,000 recordsTicketmasterMay 2024 · 560,000,000 recordsLondon DrugsApr 2024 · 3,000,000 recordsSnowflake customer credential-stuffing: AT&T 73M recordsApr 2024 · 73,000,000 records

Is your address in a public breach? Check my address →