Alberta Cyber Security Update: PHP Exploit Attempts, Loblaw Breach & Crime Stoppers Leak
October 25, 2026 | Alberta Radio Cyber Security Update | News source: OSx/AC3 News Aggregation for Alberta Radio
Cybersecurity developments affecting Albertans and Canadians include attempted exploitation of PHP vulnerabilities, new details from the Loblaw customer data breach, and continuing disruption following a Crime Stoppers information leak.
CyberAlberta flags attempted PHP exploitation
CyberAlberta advisory CAA-2026-0025 reports several unsuccessful attempts on October 21 and 22 to exploit PHP vulnerabilities associated with federal alert AL26-026. The reported attempts show why administrators should review the applicable advisories, identify exposed systems, apply vendor security updates and monitor logs for suspicious activity. The advisory describes failed attempts; it does not establish that Alberta systems were compromised.
Loblaw breach: apology and credit monitoring
Loblaw CEO Per Bank has apologized to approximately two million shoppers affected by a data breach linked to an intrusion in February. Information reported as exposed includes names, addresses, phone numbers, dates of birth and purchase details. Eligible affected customers can enrol in free credit monitoring until February 28, 2027. Customers should use official company communications to verify eligibility and remain cautious of phishing messages impersonating breach notifications.
Crime Stoppers leak: more Ontario programs paused
London police have joined other Ontario police services pausing Crime Stoppers activity following a leak involving the reporting platform. Toronto Crime Stoppers says Navigate360 provided a list of 14,973 names identified in the breach, but the list does not identify the roles or relationships of those people. The presence of a name on the list should not be taken to mean the person was an anonymous tipster.
What residents and organizations can do
Keep internet-facing software patched, restrict unnecessary services, review authentication and access logs, and use multifactor authentication wherever available. Anyone receiving breach-related messages should avoid unexpected links and contact the organization through independently verified channels.
News source: OSx/AC3 News Aggregation for Alberta Radio. Coverage based on CyberAlberta advisory CAA-2026-0025 and reporting on the Loblaw and Crime Stoppers incidents. Alberta Radio | www.albertaradio.ca.
