Free tools Windows power users keep installed
One-click scans. No signup required.
Toys “R” Us Canada said an unauthorized party copied customer database records, which may have contained names and contact details. The company said passwords and credit-card details were not exposed. It said it became aware of the incident on July 30, 2025; the number of customers affected and any final privacy-regulator finding were not established in the reports available.
What happened, and when did Toys “R” Us Canada learn about it?
In news reports published October 23, 2025, Toys “R” Us Canada said it became aware of the incident on July 30, 2025, after information believed to be connected to the company appeared in a post on what Canadian Press described as the “unindexed Internet.” The company hired third-party cybersecurity experts. Their investigation found that an unauthorized party had copied records from the customer database. Global News and Canadian Press via CityNews reported the company’s account.
The phrase “unindexed Internet” is the wording in the Canadian Press report. The coverage cited here does not establish that the information appeared on the dark web, so that more specific description should not be assumed.
What customer information may have been copied?
According to the company’s customer notice, the copied records may have included:
#1 Best Overall
- Names
- Mailing addresses
- Email addresses
- Phone numbers
The notice said passwords, credit-card details, and similar confidential data were not exposed. That distinction matters: the reported incident involved customer contact information, not a confirmed compromise of login credentials or payment details.
What did the company say about misuse and its response?
Toys “R” Us Canada said it was not aware of evidence that the information had been used for fraudulent purposes. In its statement quoted by Global News, the company said: “We are not aware of any evidence that suggests any of this information has been misused for fraudulent purposes.” This describes what the company reported at the time; it does not establish that misuse was impossible or rule out events after the statement.
The company also said it had engaged cybersecurity experts, enhanced security measures, and was reporting the matter to applicable privacy authorities. It said it had retained specialized legal counsel to assist with that process. Canadian Press reported that the Office of the Privacy Commissioner of Canada was aware of the incident and had contacted the company for information. The reports cited here do not establish a final regulatory finding or outcome.
How many customers were affected?
The contemporaneous reports did not state how many customers’ records were copied or otherwise affected. No reliable figure is established in the coverage cited above, so a total should not be inferred or estimated.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhat should customers do?
If your information was among the records, exposed contact details could make you a target for unsolicited or deceptive messages. That is a general risk of exposed contact information, not evidence that such messages or fraud occurred in this incident.
Quick Recap
- Be cautious with unexpected emails, calls, or texts that use your name or other personal details, especially if they ask you to click a link, share a password, or provide payment information.
- If a message claims to be from Toys “R” Us Canada or another organization, verify it through a contact method you find independently rather than relying on links or phone numbers in the message.
- The company said passwords were not exposed, so the reports do not establish a breach-related need to change a password. If you reuse passwords or receive a separate security alert, assess that independently.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
