Communauto Employee Accused of Unauthorized Customer Data Access

Communauto, the Montreal‑based car‑sharing service, announced that an employee accessed subscriber files with an unauthorized script on September 3 and 4, 2026. The company said the script allowed the employee to view and download personal information belonging to its customers, leading to a warning of a possible data breach.

The internal investigation identified that the script was deployed without the necessary approvals or safeguards. According to Communauto, the employee used the tool to retrieve data from the company’s subscriber database, a move that violated internal security policies. The breach was discovered shortly after the script’s use, prompting the company to alert affected customers and initiate remedial actions.

Communauto’s statement emphasized that the incident was limited to the specific employee’s actions and that no external parties were involved in the unauthorized access. The company has not disclosed the exact number of customers whose data may have been exposed, but it warned that personal information could be at risk.

In response, Communauto said it has taken steps to contain the incident, including disabling the script, revoking the employee’s access privileges, and conducting a thorough review of its security protocols. The firm also indicated that it is cooperating with relevant authorities to determine the full scope of the breach and to ensure compliance with applicable privacy regulations.

The incident comes at a time when data protection remains a critical concern for technology‑driven mobility services. Communauto, which operates a fleet of shared vehicles across Quebec, has highlighted its commitment to safeguarding customer information and reaffirmed its dedication to strengthening internal controls to prevent future unauthorized access.

Customers who receive communications from Communauto about the breach are encouraged to monitor their accounts for any unusual activity and to follow any recommended security measures. The company will continue to provide updates as the investigation progresses.