InfoSecBulletin Cybersecurity for mankind
Around 750,000 Canadian investors were impacted in a sophisticated phishing attack revealed in August 2025. The self-regulatory organization revealed the details of the breach on January 14, 2026, following a thorough investigation that took over 9,000 hours.
Unauthorized access was due to a phishing campaign that compromised sensitive investor data held by CIRO for its regulatory duties.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
The affected information includes birth dates, phone numbers, income, social insurance numbers, ID numbers, investment account numbers, and account statements.
CIRO stated that the organization did not gather login credentials, including passwords, security questions, or PINs, ensuring its security during the incident.
The breach impacted certain clients and former clients of CIRO dealer members. CIRO President and CEO Andrew Kriegler apologized and affirmed the organization’s commitment to helping those affected.
Response and Mitigation Measures:
CIRO quickly dealt with the incident and secured its systems. Initial findings indicated that registration data for member firms and individuals was breached, leading to immediate alerts for those affected.
CIRO is offering affected investors two years of free credit monitoring and identity theft protection from major credit agencies. Affected investors started getting letters from CIRO on January 14, 2026, containing instructions to activate protection services.
