Threat Intelligence Brief
Curated summary with source attribution
Source: castanet.net
Threat Risk: Medium
Victim: More Rewards members
Incident: Unauthorized access and exfiltration of a loyalty program database.
Impact: Exposure of personally identifiable information (PII) leading to identity theft and phishing risks.
Attacker: Unidentified threat actors
Analysis: Pattison Food Group’s More Rewards database suffered unauthorized access, leaking personal information including dates of birth. The breach increases the risk of targeted phishing and identity fraud because static PII cannot be easily changed. Legal filings suggest a failure to implement security measures proportional to the sensitivity of the data collected.
Recommendations: Enable multi-factor authentication on all accounts associated with the loyalty program; Exercise extreme caution with emails or texts claiming to be from More Rewards or payment partners; Monitor financial statements and credit reports for unauthorized activity
Source: Castanet.net
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source