Canadian retailer Loblaw has disclosed a data breach after threat actors gained access to customer information.