Users with accounts at Toys R UShave been informed by the company that a password reset process has been initiated for all accounts due to an attack by hackers who attempted to gain unauthorized access to accounts on the site.
The decision was made, on behalf of the company, not only because the site was attacked, but because another company was attacked and cybercriminals used those credentials to log into Toys R US user accounts.
Credential recycling is a well-known problem in the security field, and according to experts, cybercriminals test stolen usernames and passwords from various databases across multiple services to increase their efficiency.
In a letter from it, the company notifies customers of this decision, and explains that illegal log- in attempts have been recorded on Rewards “R” US accounts during the period between 28 January and 30 January.
Also, users with a Geoffrey's Birthday Club account who have logged into Rewards “R” US will be affected by the password reset
Clear instructions on how to obtain a new password based on the registration email used before January 28 are provided in the relevant announcement for users affected by it.
The company Toys R US ensures that any damages or losses that may have occurred as a result of this incident will not be charged to its customers. Additionally, the gift cards used between January 28-30 have been deactivated and new ones will be issued, with the amount that existed on January 27.
