Alert:
For more information on the cybersecurity incident, please visit the cybersecurity incident page.
Legitimate communication from CIRO and TransUnion
September 18, 2025 - If you received a letter from CIRO or an email from ciro@cyberscout.com or ciro@m.cyberscout.com they are legitimate and it is safe to follow the instructions to register for credit monitoring.
On August 11, 2025, CIRO identified a cybersecurity threat. We can confirm that registration information of CIRO member firms and registered individuals was breached.
While we have no evidence that this information has been misused, we are contacting all impacted individuals and are offering free credit monitoring and identity theft protection services for a period of two years with both TransUnion and Equifax.
We are deeply sorry this occurred. As we continue our investigation and learn more, we will continue to provide updates.
If you have questions, please see our FAQs.
Questions not answered by the FAQs?
- Members should direct any questions or concerns to MembershipServices@ciro.ca.
Welcome to CIRO.ca!
You can find the Canadian Investment Regulatory Organization (CIRO) at CIRO.ca with our fresh look and feel.