Toys “R” Us Canada has confirmed a data breach affecting customer information after threat actors published stolen records on the dark web.
The company learned of the incident on July 30, 2025, and a subsequent investigation verified the authenticity of the leaked data.
Toys “R” Us Canada emphasized that sensitive data such as account passwords and payment card details were not compromised.
The company is warning affected customers to stay vigilant for phishing attempts following a confirmed data exposure.
The extent of the breach varies between customers, but leaked details may include personal information.
Author's summary: Toys “R” Us Canada confirms data breach.