VTech
Disclosed Nov 25, 201510 years ago4,833,678 affectedSettled
2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlement
In November 2015 a hacker accessed VTech's Learning Lodge and Kid Connect systems, where data was not encrypted, exposing account data of millions of parents and children. The FTC fined VTech USD 650,000 for COPPA violations and failing to reasonably secure the data.
What is known
| People affected | 4,833,678 (as reported by the organization) |
|---|---|
| Disclosed | Nov 25, 2015 |
| Happened | Nov 13, 2015 |
| Attack | Hacking |
| Data exposed | Dates of birth, Emails, IP addresses, Names, Passwords, Addresses, Credentials and tokens, Children's data |
| Sector | Manufacturing · HK |
| Status | Settled |
| Lawsuit or fine | USD 650,000 FTC settlement (Jan 2018) (about $650K) |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: VTechhaveibeenpwned.com · Aggregator | Aggregator |
| Electronic Toy Maker VTech Settles FTC Allegations That it Violated Children's Privacy Law and the FTC Actftc.gov · Regulator | Regulator |
| Toymaker VTech handed a $650K fine by FTCtechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Nov 25, 2015 | 4,833,678 |
| Researchtotal | Nov 25, 2015 | |
| Researchtotal | Nov 27, 2015 | 4,833,678 |
History of this record
- 2026-09-25 · lawsuit: $650,000 FTC COPPA settlement (2018) to USD 650,000 FTC settlement (Jan 2018) · seed source
- 2026-09-25 · summary: Hackers extracted more than 4.8 million parent accounts and about 227,000 child accounts from VTech's Learning Lodge site, including addresses and weakly hashed passwords. The FTC said VTech failed to secure children's data and it paid $650 to In November 2015 a hacker accessed VTech's Learning Lodge and Kid Connect systems, where data was not encrypted, exposing account data of millions of parents and children. The FTC fined VTech USD 650,000 for COPPA violations and failing to · seed source
- 2026-09-25 · title: Hack of toy maker's Learning Lodge exposes millions of parent and child accounts to 2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlement · seed source
- 2026-09-25 · source_type: aggregator to regulator · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/VTech to https://www.ftc.gov/news-events/news/press-releases/2018/01/electronic-toy-maker-vtech-settles-ftc-allegations-it-violated-childrens-privacy-law-ftc-act · seed source
- 2026-09-25 · status: disclosed to settled · seed source
- 2026-09-25 · verified_by: empty to research · seed source
- 2026-09-25 · verified: 0 to 1 · seed source
- 2026-09-25 · fine_usd: empty to 650000 · seed source
- 2026-09-25 · lawsuit: empty to $650,000 FTC COPPA settlement (2018) · seed source
- 2026-09-25 · country: empty to HK · seed source
- 2026-09-25 · sector: tech to manufacturing · seed source
- 2026-09-25 · data_types: ["dob","emails","ip-addresses","names","passwords","addresses","credentials"] to ["dob","emails","ip-addresses","names","passwords","addresses","credentials","children"] · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · summary: In November 2015, hackers extracted more than 4.8 million parents' and 227k children's accounts from VTech's Learning Lodge website . The Hong Kong company produces learning products for children including software sold via the compromised to Hackers extracted more than 4.8 million parent accounts and about 227,000 child accounts from VTech's Learning Lodge site, including addresses and weakly hashed passwords. The FTC said VTech failed to secure children's data and it paid $650 · seed source
- 2026-09-25 · title: empty to Hack of toy maker's Learning Lodge exposes millions of parent and child accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Research. Record counts are as reported. Not legal advice.