Toys "R" Us Canada reports data breach exposing customer information
Learn More
Toys "R" Us Canada is reporting a cybersecurity incident that resulted in unauthorized access to customer personal information during the summer of 2025.
The breach was detected on July 30, 2025, when the company learned that information allegedly stolen from its databases had been posted on the dark web. The company engaged a third-party cybersecurity team to contain and investigate the incident. The investigation confirmed that unauthorized actors gained access to the company's systems and stole records from the customer database.
Exposed data includes:
- Names
- Addresses
- Email addresses
- Phone numbers
The nature of the attack and the number of affected individuals is not disclosed.
The company notified affected customers via email on October 23, 2025, nearly three months after becoming aware of the breach.
