Toys R Us Canada reports data breach exposing customer contact details

Toys R Us Canada notified customers this week that a cybersecurity incident discovered on July 30 may have exposed personal information after a third party posted what it said were customer records on an unindexed portion of the internet. The company said third party cybersecurity experts it hired to investigate confirmed that an unauthorized actor copied certain records from its customer database.

According to the emails sent to affected customers, the records that may have been exposed include names, addresses, email addresses and phone numbers. Toys R Us Canada said account passwords, credit card information and other similarly sensitive financial data were not included in the breach. The company added it is not aware of any evidence that the information has been misused for fraudulent purposes.

Toys R Us Canada said it immediately retained outside cybersecurity specialists to contain the incident and investigate how the data were copied. The retailer also said it has implemented enhanced security measures for its IT systems, is in the process of reporting the matter to applicable privacy regulators and has engaged specialized legal counsel. The company urged customers to...