However, the Ontario Cannabis Store says the information includes postal codes, dates of delivery of cannabis and who signed for the package.
Approximately 4,500 customers who purchased marijuana from Ontario's online cannabis store have had some of their personal information improperly accessed, the latest setback for the rollout of legal pot in Canada's most populous province.
The OCS says that after identifying the "incident", it immediately reached out to the Office of the Information and Privacy Commissioner of Ontario (IPC).
"We ... are also engaging with Canada Post to better understand what occurred and what is being done to mitigate the situation", Tobi Cohen said in an email.
The OCS said that "limited delivery information" was accessed by an individual through the Canada Post delivery tracking tool.
"At the outset, I want to express our growing concern that six days have passed and despite repeated calls to Canada Post to take responsibility and inform the individuals affected by this breach, to our knowledge nothing has been done", Ford wrote.
In a statement released to CityNews, Canada Post acknowledged the breach, saying "both organizations have been working closely together since that time to investigate and take immediate action".
In a statement on Wednesday, the Ontario Cannabis Store said it referred the matter to the province's privacy commissioner.
Emails went out Wednesday to customers impacted by the breach, a source said.
"I wouldn't say I am anxious (about this breach) but I am concerned any time my personal information is hacked", said one customer, who received the email from the cannabis store.
A spokesperson for the Ontario Cannabis Store said the organization learned on November 1 that some of its customers' shipping data was accessed by an OCS customer through a Canada Post website vulnerability.
Canada Post also added that "important fixes" have since been put in place to "prevent any further unauthorized access to customer information".
Specific details such as the name of the individual who made the order, delivery address, payment information and the contents of the order, have not been accessed, according to the OCS.
Available now: Cannabis Professional, the authoritative e-mail newsletter tailored specifically for professionals in the rapidly evolving cannabis industry.