Indigo resets some users’ online account passwords following security breach

Company spokeswoman Janet Eger said the company suspects email address and password combinations available through third parties on the Internet were used to access some Indigo.ca accounts.

She said no unauthorized transactions were fulfilled and customers would not be responsible for any fraudulent charges on their accounts.

Eger said customer credit card information is not visible on customer accounts.

The company is continuing its internal investigation and may notify authorities if required.

In February, Loblaw reset passwords for all its PC Plus rewards collectors’ online accounts. The company said a breach had happened when username and password combinations were stolen from other sites and used to access PC Plus accounts with the same combinations.

News from © Canadian Press Enterprises Inc. 2017