Friday, October 14, 2022

Notice of incident involving rewards redemption vendor Tremendous

 On Aug. 22, 2022, we were informed by Tremendous that they discovered unauthorized access to their platform by an unknown external actor. 

What information was involved? 

The impacted identifiable information included the names, email addresses, and IP addresses associated with redemptions fulfilled by Tremendous. Some non-identifiable information may have also been accessed; specifically, the amount of any redemptions and the time/date they were redeemed. 

Fortunately, no password or log-in credentials were compromised. We are notifying you out of an abundance of caution.

What Tremendous are doing 

Tremendous conducted an internal investigation to determine the cause(s) of the incident. They have engaged a professional security firm to assist them in identifying the cause(s) leading to the access, and to ensure any cause(s) are addressed and corrected. Tremendous has assured us that any security vulnerabilities associated with this incident have been fixed.

What you can do

Resources and information: The U.S. Federal Trade Commission (FTC) provides helpful resources about how to protect yourself online, including steps to protect your identity.

Need more information or have a question?

For more information, questions, or concerns regarding this incident, please email help@tremendous.com. You can also refer to Tremendous’ Privacy Policy for additional information as well as your privacy rights. 

No comments: