Update Jan. 27, 2026, at 11 a.m. ET: Canada Computers has reportedly started sending emails to impacted customers about a “a data security incident that may have exposed certain of your personal information to an unauthorized intruder.”

The retailer claims it hasn’t found “any evidence that this information has been used fraudulently,” but encouraged customers to change their website and computer passwords and monitor bank and credit card statements for unusual activity.

Check out our full story on the email, or read the original story below.

Several Canada Computers customers are reporting that their credit card information was stolen after using the retailer’s website.

In a post titled “Canada Computers online card skimmer” on the “Build a PC Canada” subreddit, the original poster claims he found malware on the retailer’s online checkout page that steals “any information you enter on the page and sends it to the attacker’s website.” (It’s currently unclear if this extends to the retailer’s mobile app.) The poster says they raised two support tickets with Canada Computers but both were since closed, leading them to warn people online.

The user says they noticed this alleged vulnerability on Jan. 18 when buying something on the website with DevTools open. According to them, the malware is “a Magecart-style script that listens to any input on the payment form fields, validates them, and steals them.” This stolen information includes “credit card number, CVV, expiration date, first name, last name, billing address, billing city, billing province, billing postal code, phone number, email address and the Canada Computers account you’re logged into.”

Canada Computers online card skimmer
byu/Extension-Fly1044 inbapccanada

In an update to the post, the user added that a snapshot they found onArchive.org indicates that the skimmer was present on the website dating back to December 8. Therefore, they advised customers who bought something from Canada Computers over the past several weeks to check their bank statements for suspicious activity.

Further, the update notes that the info stealer appeared to be removed from Canada Computer’s website on Jan. 22, though the retailer has yet to officially acknowledge the issue.

In the comments, several people corroborated what the OP had said. User livfast440, who claims they work in cybersecurity, said they “believe this is a valid threat” that looks like “a classic case of cloud misconfigurations where an actor was able to gain access at the very least to the environment running this application.” Another user said they’d have similar issues in the past, sharing another (since-deleted) Reddit thread they’d made. User Physical_Writing9090 added that they’re inclined to believe it because their bank notified them of fraudulent activities after they’d made only a “handful” of online purchases over the holidays, one of which was with Canada Computers. Someone else, darkestvice, said their card was recently compromised after buying most of their hardware from the website.

All in all, there are numerous comments from people reporting similar fraudulent activity after buying from the retailer.

MobileSyrup attempted to contact Canada Computers through multiple avenues but did not receive a response prior to publication. We will update this story if and when we hear back from Canada Computers.

In the meantime, if you shopped with Canada Computers lately, you might want to double-check your bank statement just in case.

Source:Reddit — r/bapccanada

Sign-up for MobileSyrup news sent straight to your inbox

The top technology news, delivered to your inbox every Friday.