All Breaches
February 8, 2023 Verified Sensitive Record Retail

Indigo Books & Music Data Breach

On February 8, 2023, Canadian bookstore chain Indigo Books & Music (indigo.ca) suffered a LockBit ransomware attack that disrupted online sales and point-of-sale operations.

Not disclosed
Affected People
7
Data Types
Not rated
Severity
Oct 27, 2026
Last updated

The organization has not published how many were affected, so the incident cannot be placed on this scale.

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

7
  • Names
  • Dates of birth
  • Government issued IDs
  • Bank account numbers
  • Email addresses
  • Phone numbers
  • Physical addresses

About This Breach

On February 27, 2023, the company confirmed that attackers had exfiltrated current and former employee records, exposing full names, dates of birth, Canadian Social Insurance Numbers (SINs), direct deposit bank account details, home addresses, phone numbers, and email addresses.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information