If you have any questions about this notice, or to find out if you are among the individuals affected by this incident, please contact us by email at privacy@sleemanbreweries.ca.

What Happened? 

On January 26, 2026, we discovered that an unauthorized third party gained access to our IT infrastructure in an effort to carry out a ransomware attack. As soon as we identified suspicious activity in our network, we successfully took steps to remove the threat and prevent any further unauthorized access to our systems and data. We also immediately engaged third-party cybersecurity experts to assist with containment and remediation, and to conduct an investigation to determine whether and to what extent our information may have been impacted.

Following the conclusion of the investigation, we learned that the incident resulted in certain personal information being accessed without authorization. We then initiated a thorough review of the impacted data to determine what information was involved and which individuals were impacted. That review has concluded, and we are moving promptly to notify potentially impacted individuals. 

What Information Was Involved?

While the data involved varies by individual, Sleeman’s review determined that it may have included the following personal information: date of birth, disciplinary or employment investigation records, drivers licence number, financial account number, long or short-term disability status, performance evaluations, medical information, personal leaves (e.g., parental leave, bereavement, sick leaves, etc.), and/or social insurance number.

Please be advised that not all categories of information may have been impacted for all affected individuals. 

What We Are Doing

Since discovering this incident, Sleeman engaged third-party cybersecurity experts to contain the incident and investigate the circumstances and impacts surrounding it. The incident has been contained, and we have implemented additional protections, in addition to our existing security measures. While cybersecurity incidents are unfortunately increasingly common, Sleeman is committed to safeguarding the personal information entrusted to us. 

What This Means for Affected Individuals

At this time, there is NO evidence that any personal information has been misused for identity theft or other fraudulent purposes. It is always recommended to be vigilant and report any suspicious activity to the appropriate authorities. Here are some general steps you can take to protect yourself against unauthorized access of your personal information:

- Never respond to any unsolicited requests for your personal or financial information. 

- Change your passwords regularly and make sure they are secured with multi-factor authentication whenever possible. 

- If at any time you believe you have been the victim of fraud or identity theft, contact your local law enforcement agency and file a police report.

- Remain vigilant of phishing or spoofing attempts. Spoofing is an impersonation tactic used in phishing campaigns to deceive individuals into thinking that a communication, either a letter or email, came from a trusted source and to leverage that trust to obtain further information or defraud the recipient.

- Avoid clicking on links or downloading attachments from suspicious emails.

Additional tips and resources for protecting your identity are available at: https://www.priv.gc.ca/en/privacy-topics/identities/identity-theft/guide_idt/.