Breach · · 4 min read
The Save-On-Foods More Rewards breach: what was accessed, and what to do
Pattison Food Group says names, and where given, addresses, phone numbers, emails and birth dates were accessed. Passwords and card data weren’t.
On Friday, October 17, 2026, Save-On-Foods started emailing More Rewards members about a data breach. The company says it found unauthorized activity on one of its servers on Tuesday, October 13, shut that server down the same day and brought in an outside cybersecurity firm. On Friday it confirmed that customer information in the More Rewards database had been accessed. More Rewards is run by Pattison Food Group and also covers Buy-Low Foods, PriceSmart Foods and Nesters, according to Global News. If you shop at any of them with a More Rewards account, here’s what we know and what’s worth doing.
What was accessed
The company’s incident page lists:
- your name
- and, if you gave them: mailing address, phone number, email address and date of birth
It says that, based on what it knows so far, no More Rewards ID, More Rewards password, credit card data or transaction history was accessed, that accounts remain secure, and that you don’t need to reset your password because of this incident. It says it has notified the appropriate authorities and privacy regulators.
What it hasn’t said is how many people are affected. CBC News and Global News both asked and didn’t get a number. The company also says it’s working on credit monitoring for customers who want it and will post an update when it’s ready.
Didn’t get an email? The company says it emailed every affected customer at the address on their account, and at each address if there’s more than one. Check your spam folder before you assume you’re in the clear.
What this means for you
No card numbers and no passwords is good news. The rest is still useful to a scammer. A name, home address, phone number, email and birth date in one record is the raw material for a believable phishing message, and a birth date is one of the details banks and phone companies use to confirm it’s you. For more on how that works, see how scammers use leaked data to make phishing personal.
The most likely follow-up isn’t a hacked account. It’s an email, text or call that mentions More Rewards, your points or this breach, and asks you to “verify” something.
What to do now
- Know what More Rewards will never ask for. The company says it will never contact you for your password, verification codes, banking or payment card information, your Social Insurance Number or answers to security questions. Anyone who does isn’t More Rewards.
- Don’t click links in messages about the breach, including ones that offer credit monitoring. Type morerewards.ca/update yourself to check for the real offer.
- Check your points. The company says accounts weren’t accessed, but a quick look for redemptions you didn’t make costs nothing.
- Consider a credit lock or fraud alert. Your birth date and address help someone open accounts in your name. In Quebec, and in Ontario since July 1, 2026, you can lock your credit file for free. Everywhere else, including the western provinces where Save-On-Foods operates, ask Equifax and TransUnion for a fraud alert. Our after-a-breach checklist covers how.
- Put a PIN on your phone account. With your name, number and birth date, someone can try to talk your carrier into moving your number. Our SIM swap guide shows how to lock it down.
Questions go to More Rewards customer service at 1-833-690-1146 or customer_service@morerewards.ca. The company’s privacy officer is at privacy@pattisonfoodgroup.com.
How Frame helps
Frame keeps a catalog of known breaches and lets you add the ones you know you were part of to a verified email. Frame shows what each one exposed, gives you a short checklist, and counts it in your exposure report. Automatic breach lookups aren’t live yet. We never collect or store the leaked records themselves.
Sources
- More Rewards, Update: Summary of Incident and FAQ, October 2026
- CBC News, Save-On-Foods loyalty program members had personal information accessed in cybersecurity breach, October 18, 2026
- Global News, More Rewards customer data accessed in cybersecurity breach, Pattison Food Group says, October 17, 2026
- Times Colonist (Castanet), Save-On-Foods reports data breach involving its More Rewards program, October 17, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.