Docken’s claim says the company has not disclosed when the unauthorized access began, how the third party got in, whether the data was copied, or how many members were affected. More Rewards reported more than 3.5 million household members in 2024, but the number touched by this incident remains unknown. The lawsuit argues that mix of personal details can feed identity theft, impersonation and targeted scams, the same risk that has driven other Canadian retail warnings, including the recent Loblaw breach notices sent to shoppers.