I received a CIBC letter dated October 5, 2026, confirming that a third-party service provider supporting CIBC Auto Finance suffered a cybersecurity breach between April 18 and May 27, 2026.
Personal information, including driver's licence and banking details, was affected.
CIBC hasn't identified the company responsible.
Does anyone know which third-party service provider was hacked? Has anyone else received this letter?
no comments (yet)