More Rewards data breach: what Save-On-Foods shoppers should know

We publish these pages from public notices and reporting so you can understand what was exposed. Everything here is already public. Always confirm with the organization named in your notice.

Pattison Food Group has confirmed that personal data of More Rewards loyalty members was accessed in a cybersecurity incident. The data includes names and, where members provided them, addresses, phone numbers, email addresses and dates of birth. The company says passwords, payment card data and transaction history were not accessed.

What happened

Pattison says it found unauthorized activity on one of its servers on October 13, 2026, shut the server down that day and brought in a third-party cybersecurity firm (Confirmed). On October 16, the company confirmed that customer personal data in the More Rewards database had been accessed and began emailing affected members (Confirmed). It says it has notified the appropriate authorities and privacy regulators.

More Rewards is the loyalty program for Save-On-Foods, Buy-Low Foods, PriceSmart Foods and Nesters. The program has more than 3.5 million members, according to the company. Pattison has not said how many members are affected.

What data was involved

According to Pattison (Confirmed):

• Name
• Address, phone number, email address and date of birth, if the member provided them

Pattison says passwords, credit card data and transaction history were not accessed, that member accounts remain secure and that no password reset is required (Confirmed).

A name, home address, phone number and date of birth together are the core of a people-search profile. Scammers can use this combination to make calls, texts and emails look legitimate, or to answer basic identity questions.

What you can do now

1. Expect more convincing scam messages. Pattison says it will never contact you for your password, verification codes, banking or payment card information, Social Insurance Number or security question answers. Treat any message asking for those as a scam, even if it uses your real name and address.
2. Do not reply with personal details. If a message claiming to be from More Rewards or a grocery banner asks you to confirm information, go to the store's site or app directly instead of using the link.
3. Check your credit reports. You can request your reports from Equifax Canada and TransUnion Canada and look for accounts or inquiries you do not recognize.
4. Consider a fraud alert. Ask Equifax Canada and TransUnion Canada about adding a fraud alert to your file, which asks lenders to take extra steps to confirm your identity.
5. Report scams. Report suspicious calls or messages to the Canadian Anti-Fraud Centre.