Toys “R” Us Canada has confirmed a data breach affecting customer information, after threat actors published stolen records on the dark web.
The company learned of the incident on July 30, 2025, when a post appeared online claiming to contain data from its systems. A subsequent investigation verified the authenticity of the leaked data.
Toys “R” Us Canada emphasized that sensitive data such as account passwords and payment card details were not compromised.
The company is warning affected customers to stay vigilant for phishing attempts.
Author's summary: Toys “R” Us Canada confirms data breach.