Customers of Winnipeg's Thermea spa alarmed after notification of …

The parent company of a popular luxury spa in Winnipeg is in hot water after a data breach opened the door for hackers to access a variety of private information from customers. This week, customers who purchased gift certificates from Thermea spa between early November and late February were told in an email that their credit card information may have been compromised, alongside their full names, phone numbers and email and street addresses. Groupe Nordik, the parent company of the spa, said that they learned of the breach in late February, shut down the gift certificate system and hired a third-party firm to investigate.

“We have since enhanced security measures on all Groupe Nordik systems, including the gift certificate system, and will continue to work with the cyber security firm to maximize the protection of our clients’ data,” the email said. Gift certificates that have not been redeemed are still valid, Groupe Nordik said. The appropriate authorities have been notified of the breach and affected customers were encouraged to keep an eye out for any suspicious activity.

Unencrypted credit card info

“What the email didn’t include, though, was any guidance around the risk of identity theft that they have now incurred for me,” John Robins told Radio-Canada in a Wednesday interview.

Robins purchased a Thermea gift certificate with his credit card at a Polo Park kiosk around Christmastime, he said. He has submitted a complaint about the breach to the Office of the Privacy Commissioner. He’s not aware of any fraudulent charges on his credit card, but he’s going through his records again.

Robins was surprised to learn that Thermea saved his credit card information for any amount of time. “I certainly did not think that I was putting myself in that level of risk when I made a simple point-of-sale transaction with Therma.” Gautam Srivastava, a Brandon University professor of computer science who specializes in cybersecurity, said it’s fairly normal for companies to keep the amount of customer information that Thermea did for situations involving marketing and repeat customers.

He said these kinds of data breaches are happening more often, since businesses are prioritizing ease of use.  While paying by the tap of a credit card or phone is speedy and efficient, those practices are not always compatible with good security, Srivastava said. “If you’re looking to encrypt and then decrypt information, there’s time lags there, and so a lot of systems that are built for ease of use find those sorts of things compromised.”

He said Thermea isn’t entirely to blame for the data breach, as malicious attackers often test a number of companies within a specific vicinity in search of system weaknesses. Thermea is a well-loved establishment in Winnipeg, he said, so they won’t necessarily lose all of their business because of the data breach. There are steps Groupe Nordik can take to win back customers, such as keeping their security measures updated and ensuring customers that their information is safe, he said.

Consumers can protect themselves by changing the pins of their bank and credit cards periodically and using strong passwords for their emails, as well as multi-factor authentication or biometric verifications such as fingerprint technology. But at the end of the day, it’s a matter of trust, Srivastava said. “Their brand is going to take a hit for a little bit, but they can take steps in the future starting now to kind of win back some of that trust,” he said.

“When trust is broken in anything, it takes time to win back that trust, and sometimes you never do.” In a statement to Radio-Canada, Groupe Nordik said they hired a third-party cybersecurity firm to investigate the breach and will continue to work with them in the future. “We have since enhanced security measures on all Groupe Nordik systems, including the gift certificate system, and will continue to work with the cyber security firm to maximize the protection of our clients’ data,” the statement said.

Robins said the breach came at an unfortunate time for him and his family, as they lost their house to a fire in January 2022. He said Thermea is a bit of a local institution for Winnipeg and surrounding areas. “I’ve been there many times — really enjoy their service. It’s a real treat to be able to go to a spa.”

But Robins said Thermea will have to win his business back.

“I think giving an email notification that a breach happened is a good first step and I’m grateful for that credit where credit is due,” he said.

“But frankly given the — in my estimation — very weak data practices that this company has been engaged in, I really don’t want to go back to Thermea and jeopardize my data again with that firm.”

Tags:

cult-beauty listed on couponmatrix.ukhearst-magazines listed on couponmatrix.ukjewson listed on couponmatrix.ukmercure listed on couponmatrix.ukmr-and-mrs-smith listed on couponmatrix.ukvirginia-hayward-hampers listed on couponmatrix.uk
cult-beauty listed on couponmatrix.ukCult Beauty has tried to pool its resources of a panel of nearly forty experts to create a line of the best beauty products on an easy to use website, complete with celebrity and insider knowledge. With a range of beauty professionals working at the top of their game, you can enjoy products worthy of a-listers for less with your Cult Beauty discount code from Groupon. Whether it's a new scientific discovery or a time-honoured technique used for hundreds of years. With the experts cherry-picking the best beauty finds, you can ensure that the products on their website are the best of the best, no matter what you choose, separating the blaggers and braggers from the gems that do what they say on the bottle.
hearst-magazines listed on couponmatrix.ukHearst Magazines is one of the largest media companies in the world, with a portfolio of iconic brands spanning a wide range of interests. From fashion to food, fitness to finance, Hearst Magazines has something for everyone. And with a Hearst Magazines discount code, you can save on your favorite titles. Whether you're looking for the latest issue of Cosmopolitan or Elle, or you're wanting to explore a new interest with Harper's Bazaar or Men's Health, there's a Hearst Magazines promo code that can help you save. So why wait? Start reading today! At Groupon, we know that saving money is important to our customers. That's why we work hard to find the best Hearst Magazines discount codes and promos. We make it our mission to keep our deals page updated with the latest offers so you can always find a way to save. So what are you waiting for? Grab a Hearst Magazines discount code from us and start saving today! If you're looking for a Hearst Magazines promo code, you've come to the right place. At Groupon, we have a wide selection of deals on your favorite Hearst Magazines titles. Whether you're looking for the latest issue of Cosmopolitan or Elle, or you're wanting to explore a new interest with Harper's Bazaar or Men's Health, there's a Hearst Magazines promo code that can help you save. So why wait? Start reading today!
jewson listed on couponmatrix.ukThere’s no task too large nor project too ambitious for the building whizzes at Jewson, experts in offering all the construction essentials anyone needs to start from the ground-up. Whether you need bricks and building supplies or power tools and cleaning equipment, a Jewson voucher code is all that’s required to get the machines and materials you need at a price below your budget. Even if you just need some advice or help planning a project, there’s always advice on hand from the experts at Jewson.
mercure listed on couponmatrix.ukGet the best and most authentic experience whenever you stay at Mercure hotels. They look to immerse you in a destination, be that Bangkok or Paris. With an insider knowledge of local culture and customs, you’re properly introduced to a country, and with a Mercure discount code you can enjoy it all without blowing your holiday budget. There are hotels all over the globe, so look out for Mercure on your next trip away.
mr-and-mrs-smith listed on couponmatrix.ukNobody knows luxury stays like Mr & Mrs Smith – the prestigious hotel brand offering exotic stays that won’t be soon forgotten. Live the dream of dining on the beach or receiving a massage 60 feet high and experience the high life for less with a Mr & Mrs Smith voucher. Whether you’d like to put your feet up in a literal cave, have an afternoon lounge above the sea or anything in-between, find the hotel stay of a lifetime with Mr & Mrs Smith.
virginia-hayward-hampers listed on couponmatrix.ukIf you’re looking for the perfect, indulgent gift, then look no further than Virginia Hayward hampers. It has a huge selection, with all sorts of sweet, savoury, and alcoholic items on offer so you can treat that special someone in your life. Finding something they’ll love doesn’t need to cost the earth either, as with a Virginia Hayward discount code, you can get the gifts for less! Whether you’re buying for a friend, family members, or romantic interest, Virginia Hayward is the place to go.