Playtime’s over: Crooks swipe Toys R Us Canada customer data and dump it online

The Canadian outpost of retailer Toys R Us on Thursday notified customers that attackers accessed a database, stole some of their personal information, then posted the data online. In a Thursday breach disclosure notice emailed to affected customers and shared on social media, the toy shop said it discovered the digital break- …

[alain williams]

Statutory redress

There ought to be statutory compensation given to all those affected by such a heist. Partly to redress any loss or hassle caused and partly to raise the cost to the compromised organisation which would increase insurance costs and so make the board more willing to enact proper security in the first place.

[Anonymous Coward]

Re: Statutory redress

Insurance usually doesn't cover costs associated with criminal/regulatory fines, it makes the fines themselves pretty pointless if they are paid by a 3rd party.

[John Brown (no body)]

They've known for 3 months?

...and are only now telling the true victims?

And they are still "in the process of reporting the intrusion to privacy regulatory authorities." Really? How long does that take?

The C-Suite should be locked up for that alone.