Toys ‘R’ Us Canada Customer Information Leaked Online

Toys “R” Us Canada this week notified customers that a threat actor stole their personal information and leaked it on the dark web, after the incident was discovered on July 30 when the data appeared on the unindexed internet. The compromised records include names, addresses, email addresses, and phone numbers, and the firm said it immediately hired third‑party cybersecurity experts to assist with containment and investigation.

According to Toys “R” Us Canada, no passwords, credit card details, or similar sensitive information were stolen in the data breach, and the company is in the process of notifying the relevant authorities. The organisation has not disclosed how many individuals were affected, nor who was responsible for the incident, and SecurityWeek notes that it remains unclear if any extortion demands were received.

Toys “R” Us Canada operates 40 locations in the country, and the article emphasises that it is urging customers to remain vigilant against phishing and impersonation attempts.