iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Petro-Canada customer information was involved in a 2023 cybersecurity incident. A July 10, 2023 MobileSyrup report said the company’s notification to customers listed names, phone numbers, birthdays, email addresses and mailing addresses among the information stolen. Suncor’s later annual report confirmed a Petro-Points customer-data breach but did not specify which fields were exposed.
What information did the report say was stolen?
MobileSyrup reported that Petro-Canada told customers hackers had accessed its IT network and stolen names, phone numbers, birthdays, email addresses and mailing addresses. That field list comes from the outlet’s account of the customer notification; Suncor’s annual report does not enumerate the exposed data fields. MobileSyrup’s July 10, 2023 report
The cited accounts do not establish that passwords, payment-card details or any particular customer’s account were accessed. They also do not give a reliable total for the number of affected members, so the incident should not be taken to mean every Petro-Points member was affected.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →When did the incident happen?
There are two distinct dates in the available accounts. MobileSyrup reported that Petro-Canada told customers its IT network was accessed on June 21, 2023. Suncor’s 2023 annual report says the company confirmed a cybersecurity incident on June 25, 2023. The confirmation date is not a replacement for the reported network-access date. Suncor’s 2023 annual report
#1 Best Overall
What did the incident mean for Petro-Points accounts?
According to MobileSyrup’s account of Petro-Canada’s customer email, Petro-Canada disabled Petro-Points systems at the time, said existing points balances were safe, and planned to credit points accumulated while the program was offline. Those statements describe the response during the 2023 outage; they do not confirm any member’s current balance or account status.
Suncor’s annual report says the breach briefly affected certain transactional systems and did not materially affect the company’s 2023 financial results. That company-level financial assessment does not measure possible consequences for an individual customer.
What should Petro-Points members do about suspicious messages?
- Do not share a verification code. Petro-Canada’s current two-factor authentication guidance says, “Petro-Canada will never contact you by phone, text, or email asking you to share your verification code.” Petro-Canada’s two-factor authentication guidance
- Be cautious with unsolicited emails or texts, including messages that use Petro-Canada’s name or appear to link to its website. The U.S. Securities and Exchange Commission’s general phishing guidance notes that fraudsters may impersonate real companies and imitate their websites. SEC phishing guidance
- If you are concerned about your account, contact Petro-Canada through its official customer-service page, which lists phone support at 1-800-668-0220 and online chat for Petro-Points questions.
What is not established about the breach?
The available reporting confirms an incident involving Petro-Points customer data, but it does not establish the exposure status of any one member, a count of affected customers, or theft of passwords or payment information. Suncor’s financial-materiality statement is not evidence that individual customers faced no risk.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
