April 27, 2026 Canada Life says it has contained a cybersecurity incident involving unauthorized access to internal applications through an employee account. The company estimates that less than 0.5 per cent of its 14 million Canadian customers, about 70,000 individuals, may have been affected, with personal data potentially exposed.
The insurer said it launched an immediate investigation with third-party cybersecurity experts and notified authorities after identifying the breach.
“Canada Life recently identified a cyber incident involving unauthorized access to certain applications through an employee account,” the company said in a statement, adding that operations have continued without disruption.
The company’s current assessment indicates the impact is limited to a “small proportion” of customers, primarily tied to a single corporate client. Compromised data may include names, addresses, and in some cases dates of birth and earnings information. Canada Life said affected individuals will be contacted directly and offered free credit monitoring services.
While the incident has been contained, the full scope remains under investigation. Media reports have suggested the number of impacted individuals could reach into the tens of thousands, though the company has not confirmed those figures beyond its estimate of approximately 70,000 affected customers.
Additional reports circulating online, including claims shared by cybersecurity outlet Daily Dark Web, allege that a threat actor may have accessed database records containing personal information, potentially including Salesforce data. Canada Life said it does not have information confirming those claims and declined to comment on reports of a possible $500,000 ransom demand.
The company emphasized that its international operations in the United Kingdom, Isle of Man, Germany, and Ireland were not affected. “Our primary focus is the protection and care of our customers, advisors, and employees,” the company said, noting that it has already begun notifying impacted customers.
