DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Toys “R” Us Canada customers notified of breach of personal information

Posted on October 24, 2025 by Dissent

Tara Deschamps reports:

Toys “R” Us Canada has notified customers of a data breach it says may have compromised their personal information.

In an email sent to shoppers Thursday morning, the toy store said it learned on July 30 that someone had posted information on the “unindexed Internet” they claimed to have stolen from the business’s databases.

It’s unclear whether Toys “R” Us Canada was referring to the deep web, a part of the internet which is difficult to access because it is not indexed by search engines, or the dark web, which is accessed through software and is often a haven for criminal activity.

The company did not immediately respond to a request for comment on the breach email or explain why it took so long to notify customers of the incident.

Read more at Vancouver City News.

No group has publicly claimed responsibility for the attack as of publication, and Toys ‘R’  Us Canada did not disclose whether there was any ransom demand.

Category: Business SectorHackNon-U.S.

Post navigation

← Gatineau gymnastics centre warns members of possible data breach
ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale. →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Fourth Circuit Weighs in on Standing in Data Breach Class Actions
  • ALT5 Sigma sues former consultant over alleged data breach
  • Is your cyberinsurance paid up? Are you sure?
  • Everest Group Interview on Collins Aerospace Breach — Daily Dark Web
  • Breaking Up With Edtech Is Hard to Do
  • Benworth Capital Partners negotiated with threat actors after more than 25,000 lenders had data stolen
  • Android Hit by 0-Click RCE Vulnerability in Core System Component
  • Attorney General James and Multistate Coalition Secure $5.1 Million from Illuminate Education For Failing to Protect Students’ Data
  • The Congressional Budget Office was hacked. It says it has implemented new security measures.
  • Clop Ransomware group claims the breach of The Washington Post

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Modern cars are spying on you. Here’s what you can do about it.
  • Attorney General James and Multistate Coalition Secure $5.1 Million from Education Software Company for Failing to Protect Students’ Data       
  • EU Parliament committee votes to advance controversial Europol data sharing proposal
  • DHS offers “disturbing new excuses” to seize kids’ biometric data, expert says
  • California Adds Injunctive Relief to its Right of Publicity Statute and Extends Liability to Digital Replicas

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.