Data Breach Litigation – What We Can Learn From Toys "R" Us

This blog has published numerous articles on data breach litigation and makes solid efforts to keeps its readers abreast of all the latest data breach litigation news. You can read a couple of these articles here and here.

I recently received an email from Toys "R" Us, Inc. alerting me that it had identified an attempt to gain unauthorized access to a small number of reward accounts. It was suspected that the activity was due to large breaches at other companies where usernames and passwords were stolen. Toy "R" Us's strong security measures tipped them off to the login attempts. Although no breach occurred, Toys "R" Us took the preventative step of sending a password reset email. This email recommended that all of its reward customers reset their passwords and gave step-by-step instructions on how it could be done.   This type of proactive move will likely help Toys "R" Us avoid a successful hack attempt in the future. It certainly also gained customer trust.