A statement from the Hong Kong-based company, posted on Monday, made no reference to pictures or audio recordings.
It reiterated no credit card or social security data had been stolen in the breach.
Security experts have rounded on the company for failing to provide what they said were basic protections against cyber-attacks.
Troy Hunt, an Australia-based security researcher who was able to analyse the hacked data, posted a detailed breakdown of Vtech's services on his website.
He said: "All communications are over unencrypted connections, including when passwords, parent's details and sensitive information about kids is transmitted."
Security experts also warned other connected toys could be targeted by hackers.
Thirteen other Vtech services have been taken offline by the company as a precautionary measure.