CIRO cybersecurity incident. On August 11, 2025, the Canadian Investment Regulatory Organization (CIRO) , Canada’s self-regulatory body overseeing investment and mutual fund dealers, identified a cybersecurity incident and proactively shut down its systems as a precaution. CIRO has since determined that investor information associated with member firms may have been impacted. TriCert is not a CIRO member firm and does not provide client information to CIRO directly; however, client information may have been provided to CIRO through our custodian, a CIRO member firm, as part of CIRO’s role in carrying out its regulatory mandate. CIRO is contacting impacted individuals directly by email or regular mail and is offering two years of free credit monitoring and identify theft protection services through TransUnion and Equifax. For more information, please visit CIRO’s cybersecurity incident page.