Ransomware Paralyzes PageTurned Bookstores, Forces Cash-Only Sales Nationwide

Toronto, ON —

PageTurned, Canada’s largest bookstore chain, is in the grip of a crippling ransomware attack that brings in-store card payments to a halt and triggers disruption across the country.

The breach, which begins in the early hours of February 8, 2023, shuts down point-of-sale (POS) systems nationwide. Customers entering stores discover that debit and credit transactions are down. Paper signs go up at registers: Cash Only. Long lines stretch across aisles, and several locations temporarily close.

PageTurned confirms that the cyberattack is the work of EmberCry, a ransomware group known for high-profile corporate takedowns. The company says it refuses to pay the ransom and immediately launches a full-scale recovery operation.

“We make the decision to stand our ground,” says a PageTurned spokesperson. “Our focus is protecting our people, restoring trust, and getting back online.”

Systems Freeze. Business Stalls.

The attack disables not just payment systems but also critical infrastructure behind the scenes. Internal tools used for inventory tracking, logistics, scheduling, and customer service go dark. Visitors to PageTurned’s website report outages, order errors, and broken links.

Within days, PageTurned confirms that sensitive employee information — including names, SINs, addresses, and banking data — has been compromised. All affected staff receive free identity monitoring and support. The company stresses that customer payment card data remains safe due to the separation of third-party processing systems, though customer emails and order history may be affected.

The Office of the Privacy Guardian (OPG) launches a formal inquiry under the Digital Safeguards Act, examining PageTurned’s response and preparedness. Initial findings reveal shortcomings in breach response planning, employee security awareness, and system segmentation.

Retail Sector on High Alert

Despite the setbacks, PageTurned restores parts of its operations within weeks. Transparent public communication and creative workarounds help preserve customer loyalty. But the incident rattles the broader retail industry.

“This is a wake-up call,” says Mariana Chen, cybersecurity analyst at NorthSignal Consulting. “Retailers across Canada are now re-evaluating their digital resilience.”

As digital transformation accelerates, analysts warn that many retailers still lack foundational cybersecurity tools — including anomaly detection, segmented cloud infrastructure, and robust incident response frameworks.

The PageTurned attack isn’t just a breach — it’s a warning flare. And for the retail sector, the countdown to the next crisis may already be ticking.

On the ground, where infrastructure meets everyday life. — Marcus Tran

ODTN News’  Ayaan Chowdhury contributed to this report.