A spokesperson for the furniture retailer’s Canadian division said that no financial information was accessed in the incident, which was discovered between March 1 and March 3.
The company said that an employee searched a customer database without permission but declined to say how it uncovered the breach or whether the information was secured by a password.