Looks like someone’s going on the naughty list! 🎅 The North Pole Company has reportedly fallen victim to a large-scale data leak.

As reported here, a user named FutureSeeker posted on January 19, 2025, on a site called Breach Forums, sharing a sample and link to user records from the reported data breach affecting North Pole Company Canada, which is an e-commerce platform specializing in Christmas gift products for Canadian customers. It’s part of the North Pole Company, which operates in the US. The company offers curated gift baskets with items like coffee, tea, cookies, and chocolates.

The reportedly compromised data allegedly includes 520,599 records, such as full names, email addresses, phone numbers, and physical addresses. The incident remains unconfirmed, and North Pole Company Canada has not yet issued an official statement (if they do, I will update this blog post).

Not only that, but there are also no reported details yet on how the breach may have occurred. Although it is uncertain whether other sensitive information, such as financial or payment details, was exposed, the type of data reportedly leaked could enable identity theft, phishing schemes, and other fraudulent activities.

I would say that Christmas season has given way to data breach season, but there’s never an off-season for data breaches. Nobody is saying “ho, ho, ho” over this one. 😩

So, what do you think? Has your organization ever suffered a data breach? Please share any comments you might have or if you’d like to know more about a particular topic.

P.S.: That isn’t a picture of the North Pole, it’s a picture of Houston, Texas – today!! 🤯

Disclaimer: The views represented herein are exclusively the views of the authors and speakers themselves, and do not necessarily represent the views held by my employer, my partners or my clients. eDiscovery Today is made available solely for educational purposes to provide general information about general eDiscovery principles and not to provide specific legal advice applicable to any particular circumstance. eDiscovery Today should not be used as a substitute for competent legal advice from a lawyer you have retained and who has agreed to represent you.