Ganz

Ganz, operating under the alias Webkinz World, is a Canadian company that creates plush toys linked to an online virtual world designed for children. Each Webkinz plush animal includes a unique code that grants the owner access to the Webkinz World website, where they can adopt and care for a digital version of their pet, play games, and participate in moderated activities. The core offering blends physical merchandise with a browser‑based platform that does not require a subscription, generating revenue primarily from toy sales and optional virtual item purchases. The service is marketed mainly to families in North America but is distributed internationally through various retail partners.

The 2020 security incident disclosed that approximately 23 million usernames and associated encrypted passwords were exposed, indicating a substantial user base for the Webkinz World platform. The breach was traced to an SQL injection vulnerability that also allowed access to hashed parent email addresses, although those were not released publicly. Ganz stated that no sensitive personal or financial information was stored on the compromised servers because of prior encryption improvements and segregated transaction systems. Following detection, the company patched the flaw, began a review of other potential entry points, and noted that it would consider forced password resets for active accounts if deemed necessary.

Ganz distinguishes itself in the children’s entertainment sector by integrating tangible toys with an online virtual environment, a model that has been a hallmark of its brand for over a decade. The company employs security controls such as MD5‑Crypt password hashing and separates transaction processing from user data storage to limit exposure. While the prompt does not specify ownership details or parent/subsidiary relationships, Ganz remains a privately held Canadian toy manufacturer. After the 2020 incident, the firm emphasized its ongoing efforts to strengthen the platform’s security posture and protect the privacy of its young users.