VTech

Disclosed Nov 25, 20154,833,678 affectedSettled

2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlement

In November 2015 a hacker accessed VTech's Learning Lodge and Kid Connect systems, where data was not encrypted, exposing account data of millions of parents and children. The FTC fined VTech USD 650,000 for COPPA violations and failing to reasonably secure the data.

What is known

People affected	4,833,678 (as reported by the organization)
Disclosed	Nov 25, 2015
Happened	Nov 13, 2015
Attack	Hacking
Data exposed	Dates of birthEmailsIP addressesNamesPasswordsAddressesCredentials and tokensChildren's data
Sector	Manufacturing · HK
Status	Settled
Lawsuit or fine	USD 650,000 FTC settlement (Jan 2018) (about $650K)
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: VTech

Regulatorftc.gov

Electronic Toy Maker VTech Settles FTC Allegations That it Violated Children's Privacy Law and the FTC Act

Newstechcrunch.com

Toymaker VTech handed a $650K fine by FTC

Notices filed

Accounts in the dataNov 25, 2015

Have I Been Pwned4,833,678 people

TotalNov 25, 2015

ResearchCount not stated

TotalNov 27, 2015

Research4,833,678 people

History of this record

lawsuit2026-09-25

$650,000 FTC COPPA settlement (2018) to USD 650,000 FTC settlement (Jan 2018)by seedSource

summary2026-09-25

Hackers extracted more than 4.8 million parent accounts and about 227,000 child accounts from VTech's Learning Lodge site, including addresses and weakly hashed passwords. The FTC said VTech failed to secure children's data and it paid $650 to In November 2015 a hacker accessed VTech's Learning Lodge and Kid Connect systems, where data was not encrypted, exposing account data of millions of parents and children. The FTC fined VTech USD 650,000 for COPPA violations and failing to by seedSource

title2026-09-25

Hack of toy maker's Learning Lodge exposes millions of parent and child accounts to 2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlementby seedSource

source_type2026-09-25

aggregator to regulatorby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/VTech to https://www.ftc.gov/news-events/news/press-releases/2018/01/electronic-toy-maker-vtech-settles-ftc-allegations-it-violated-childrens-privacy-law-ftc-actby seedSource

status2026-09-25

disclosed to settledby seedSource

verified_by2026-09-25

empty to researchby seedSource

verified2026-09-25

0 to 1by seedSource

fine_usd2026-09-25

empty to 650000by seedSource

lawsuit2026-09-25

empty to $650,000 FTC COPPA settlement (2018)by seedSource

country2026-09-25

empty to HKby seedSource

sector2026-09-25

tech to manufacturingby seedSource

data_types2026-09-25

["dob","emails","ip-addresses","names","passwords","addresses","credentials"] to ["dob","emails","ip-addresses","names","passwords","addresses","credentials","children"]by seedSource

records_basis2026-09-25

hibp to organizationby seedSource

summary2026-09-25

In November 2015, hackers extracted more than 4.8 million parents' and 227k children's accounts from VTech's Learning Lodge website . The Hong Kong company produces learning products for children including software sold via the compromised to Hackers extracted more than 4.8 million parent accounts and about 227,000 child accounts from VTech's Learning Lodge site, including addresses and weakly hashed passwords. The FTC said VTech failed to secure children's data and it paid $650by seedSource

title2026-09-25

empty to Hack of toy maker's Learning Lodge exposes millions of parent and child accountsby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about VTech