Canada Life Data Breach Now Exposes 246,605 Customer Records

In April 2026, HEROIC analysts identified a verified data breach tied to Canada Life, a major insurance and financial services provider, exposing 246,605 records. The exposed fields included email addresses, first and last names, phone numbers, and usernames belonging to customers and advisors connected to the company. Anyone who has ever held a policy, filed a claim, or worked with an advisor tied to this brand should scan your email to check whether their information was part of the exposure.

Why This Is Dangerous

Insurance relationships involve trust, and a scammer holding a real name, phone number, and username can exploit that trust directly. A call that references your actual policy relationship and uses your correct name feels legitimate, which is exactly what makes insurance-themed phishing so effective once contact details leak.

What Was Exposed

• Email Address
• First Name
• Last Name
• Phone Number
• Username

The realistic risks here include fraudulent claims calls, fake policy renewal messages, and attempts to reset the accounts tied to the exposed usernames. Advisors and internal staff whose contact details were included could also be targeted with convincing business email compromise attempts.

According to HEROIC analysts, this exposure fits the pattern of a database breach, meaning the records were taken directly from the company's own internal systems rather than from an individual device infected with malware. That distinction points to a single organizational compromise rather than many separate incidents scattered across different victims.

Verify Your Exposure Today

Scan your email to check whether it appears among the exposed records. If it does, be skeptical of unsolicited calls or emails about policy changes or renewals, and avoid confirming personal information to anyone who contacts you first. Update the username on any related insurance account as a precaution.

This applies equally to personal and work email addresses, since advisors and staff contacts were included alongside customers.