Canada Post won't say what information was breached, but it admits it involved thousands of Ontario's online cannabis customers.
The postal service says someone had used its delivery-tracking tool to gain access to personal information of 45-hundred customers of the Ontario Cannabis Store.
Canada Post notified the online cannabis store on November 1st about the breach.
In a statement yesterday, the Ontario Cannabis Store said it referred the matter to the province's privacy commissioner.
The statement also says the store had ``encouraged'' Canada Post to take immediate action to notify its customers.
In response, a spokesman for Canada Post says it had explained to the cannabis outlet that it did not have contact information for the pot buyers.
According to the online store, the compromised information included postal codes and the names or initials of the person who accepted delivery of the marijuana.
Ontario's privacy commissioner, Brian Beamish, calls the breach ``unfortunate'' but said it appeared the risk to customer data was limited.