The Ontario Provincial Police (OPP) confirmed that the agency is investigating a major data breach affecting 1,200-plus regulated cannabis stores in the Canadian province.
Ontario’s retail cannabis sector is reeling after it was revealed that the government-run Ontario Cannabis Store (OCS), the province’s legal wholesaler of adult-use marijuana, lost track of a significant amount of data for at least one month.
The leaked data is said to include the sales of every cannabis store in the province for December 2021 as well as store name, respective license numbers, kilograms sold that month, kilograms sold per day, total units sold, total inventory at the beginning of the month plus each store’s sell-through rate, among others.
Stores have expressed concern the leaked information might increase security risk because the public could calculate approximately how much inventory each store carries day-to-day.
“I can confirm that the Ontario Provincial Police is conducting an investigation,” a spokesperson told MJBizDaily via phone.
“If our investigation does determine that charges are warranted, they will be laid.”
The spokesperson wouldn’t comment further.
The data leak was publicly acknowledged by the Alcohol and Gaming Commission of Ontario in a Tuesday tweet in which the provincial cannabis store regulator denied its involvement in the leak.
The AGCO tweeted that the Investigation and Enforcement Bureau, an integrated bureau within the AGCO and composed of OPP officers, has been working with the OCS regarding the leak.
Hours earlier, at 1:52 p.m. ET, the OCS sent emails to retailers informing them that “confidential OCS store sales data is being circulated in the industry.” That email was shared in confidence with MJBizDaily.
It is not known when the OCS and AGCO became aware of the data breach.
The organizations did not immediately answer MJBizDaily queries on Wednesday.
Expert advice for a stronger shelf life
Learn the fundamentals for getting started in cannabis retail in this comprehensive guide curated by the editors at MJBizDaily with help from industry experts.
Inside the MJBizDaily Retail Buyers Guide:
- Learn best practices for designing a cannabis dispensary.
- Select display infrastructure that supports industry compliance.
- Choose the right point-of-sale system for your operation.
- How to incorporate e-commerce and home delivery.
- And more!
In its email to retailers, the OCS said it took immediate steps to address the situation, including restricting access to internal data reports, commencing an investigation to identify the source of the leak and notifying the Ontario Provincial Police.
Ontario had 1,468 licensed cannabis stores open for business as of May 2, with another 445 active store authorization applications under review, according to data provided by the AGCO.
Matt Lamers can be reached at firstname.lastname@example.org.