Toys”R”Us IT security team identified an attempt to gain unauthorized access to Rewards”R”Us accounts and thus redeem some members’ Reward coupons between November 11, 2016 and January 17, 2017. Below is information we wanted to share to help protect you against potential misuse of your information.
The vendor who manages our Rewards”R”Us loyalty program recently found unauthorized attempts to access Rewards”R”Us loyalty member accounts. It appears this was an effort to fraudulently redeem Rewards coupons beginning in November. This activity is related to previously reported online breaches, not affiliated with Toys”R”Us, where thieves stole login names and passwords. This may be because the thieves know that users tend to have the same password across multiple accounts.
What Information Was Involved?
Account information may include the loyalty members’ name, email addresses, mailing address and phone number(s). If you have a Geoffrey’s Birthday Club account and it is linked to your Rewards”R”Us Account, then information in this account may have been accessed as well. Please be assured that the Rewards”R”Us profiles and vendor database do not contain credit card numbers, payment or other sensitive personal information, such as Social Security numbers.
What is Being Done
We do not believe your account was accessed during this time frame and have no reason to believe that your password was compromised. However, out of an abundance of caution, we are encouraging ALL loyalty members to reset their passwords. (Details on how to reset your password are below.) Toys R Us is working with their vendor to ensure additional security measures are implemented to help prevent future unauthorized activity.
What You Can Do.
Internet security experts recommend using different passwords for each account and electing passwords that are hard to guess. In addition, Toys R Us will never ask you for personal or account information in an email, so you should not respond if you receive unsolicited emails that ask for that information.
How to reset your Rewards”R”Us password:
1. Visit Forgot Password section of the Rewards”R”Us website here
2. Enter your Membership # and the Email address associated with your account
and click “Submit”. If you lost or forgot your Membership #, click on “Forgot
Membership #”. For help, you may also call 1-800-TOYSRUS.
3. Answer the security question and create your new password. They highly recommend a
complex password that includes a mix of letters, numbers and symbols. Do
not reuse a password you have used before or at other sites.
4. A pop-up window will appear upon a successful password change.
5. Login to your account using your Membership # or email address and new
Want to stay in the loop on all the HOTTEST DEALS? Join our Facebook groups!
Start off your purchase through Ebates and get cash back!