Customers of luxury spa group, Groupe Nordik in Ontario, are reporting fraudulent charges following a data breach, which has impacted the gift certificate system of the company.
The company which is headquartered Chelsea, Quebec, owns several spa locations across Canada, including Thermea Spa Village in Whitby, Ontario.
According to a letter sent to affected customers, Nordik became aware of “suspicious activity” in the system in late February. The compromised information includes full names, phone numbers, street addresses, and credit card information of those impacted by the leak.
The breach occurred during the period of Nov. 4, 2022, to Feb. 27, 2023. Alexandre Cantin, COO of Groupe Nordik, stated it is possible that personal information was accessible when purchasing a gift certificate on the platform during that time.
Recently, Nordik’s Thermea Spa Village was involved in a lawsuit related to the widespread staph infections, which were claimed to have been caused by exposure to a saltwater pool in the spa.
Victims of the data breach have reported on social media fraudulent charges for hundreds of dollars in Uber and meal delivery app orders. One customer related how she received several DoorDash charges of more than $100 value after she purchased a Nordik gift card.
Speaking to CTV News, she said: “They didn’t really offer anything. They didn’t offer a discount or services, or any credit monitoring or anything. They just told us, ‘you’re on your own.’” She related the fraud charges appeared around Christmas time, adding to her frustration of seeing the charges in a time when shopping bills already tend to be high.
While Nordik has claims it is doing everything it can to rectify the situation, customers have expressed frustration over the lack of concrete solutions or compensation offered by the company.
“This was kind of a huge nuisance.”
The post Ontario’s Groupe Nordik spas suffer data breach appeared first on Pool & Spa Marketing.
