Toys "R" US-Delaware, Inc.

Toys "R" Us-Delaware, Inc. reported unauthorized access to Rewards"R"Us loyalty program accounts between November 11, 2016, and January 17, 2017. The incident involved the use of stolen credentials from other breaches to fraudulently redeem reward coupons and gift cards. Affected data included names, email addresses, mailing addresses, phone numbers, and potentially children's names and birth dates. No credit card or SSN data was stored. The company reset passwords and reinstated points/gift cards.