Canada Life data breach: what happened and what to do

What happened

In April 2026, Canada Life was the victim of a "pay or leak" extortion campaign. The attackers demanded payment and, when it didn't come, published the data. Have I Been Pwned added the leak in May 2026.

Canada Life's own notice says someone gained unauthorized access to certain applications through an employee account, and that the incident has been contained. The company also says its public service plan members' banking information, medical information and government identification numbers were not affected. In its description, Canada Life said "a small proportion of our customers" may have been impacted.

What was exposed

Have I Been Pwned counts about 238,000 unique email addresses. Alongside them were names, phone numbers, physical addresses, job titles, salutations and, in some cases, customer support tickets.

What it means for you

This is contact data, not payment data, and that shapes the risk. A scammer who has your name, email, phone number, address and a past support ticket can write a message that sounds like it comes from Canada Life or your employer's benefits plan. Support tickets are the riskiest part: they tell a criminal what you asked about, which makes a fake follow-up more believable.

Canada Life has published a warning telling people to expect phishing aimed at employees, customers, plan sponsors and advisors, and says it will never ask for passwords, one-time codes or sensitive personal information by email or text.

What to do

Treat any unexpected message that mentions Canada Life as suspect, whether it arrives by email, text or phone. Don't click the link. Open the Canada Life site or app yourself, or call the number on your card or plan documents. You don't need to change your password unless you reused it, but it costs nothing to do so.