Toys “R” Us Canada has confirmed a data breach affecting customer information, after threat actors published stolen records on the dark web.
The company learned of the incident on July 30, 2025, when a post appeared online claiming to contain data from its systems.
A subsequent investigation verified the authenticity of the leaked data, which may include certain personal information, but varies between customers.
The leaked details may include:
Toys “R” Us Canada emphasized that sensitive data such as account passwords and payment card details were not compromised.
The company is warning affected customers to stay vigilant for phishing attempts following the confirmed data exposure.
Author's summary: Toys “R” Us Canada confirms data breach.