Given the amount of reports from both here and the GI Joe Club, I personally feel we've reached beyond the threshold of "a reasonable belief that there might have been a breach" and Funpub is obligated under law to notify those who've done business with them of a possible breach. Not only are they in violation of the trust between customer and vendor, but quite possibly the law. A law that carries significant financial penalties if found guilty.
That in itself should be enough to generate a response from the company, to either say "No, we can assure you that NO BREACH occurred" or "We believe a breach might have occurred" If they can't guarantee the former, then it means they do have a reasonable belief that it could have been. Failure to notify its customers in the amount of time that has passed is illegal.
Secondly, if writing to Hasbro will help reveal the scope of how many people are actually being affected by this, then it gives them the opportunity to investigate and come to a conclusion so that consumers aren't forced to draw their own.
Being worried about trivial things like club toys in the future is missing the point of this issue when people's personal and financial information are being sold to criminals around the world, Many fraudulent charges COULD have been prevented if the legally mandated notifications were given out.
Such irresponsibility not only affects the club or its customers, but it affects banks, the vendors where fraudulent purchases were made and Hasbro itself. Thousands of dollars, if not more, of money and time being wasted all because someone at the club didn't want to 'admit fault'.
This is a very serious issue and by now something should have been formally stated either way from the Club regarding a breach.
Thank you. My sentiments exactly.