The social insurance numbers, financial details and other data of some current and former Indigo employees was compromised in a ransomware attack between Jan. 16 and Feb. 8, president Andrea Limbardi said in an email to them. (SHuSH, The Globe and Mail)

Talking point: The latest development comes more than two weeks after the Canadian retailer’s website and in-store payments systems were hit with a cybersecurity incident. Indigo has confirmed it was a ransomware attack. No customer data was breached, according to its investigation. It is notifying law enforcement, as well as former and current employees who were affected, offering them two years of credit monitoring and identity theft services. Since Feb. 13, Indigo has been able to accept debit, credit and gift cards at stores. More than a week after the attack, it launched a browse-only website powered by Shopify. It can now accept online orders, only for select books. Meanwhile, Telus said it’s investigating claims that “a small amount of data,” including some employee information and company source code, was posted to the dark web.