Hasbro, one of the world’s largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.
Founded in 1923, Hasbro is a publicly traded American multinational entertainment conglomerate on the NASDAQ and owns many brands, including Monopoly, Clue, Nerf, Transformers, Play-Doh, Peppa Pig, Scrabble, Magic: The Gathering, Dungeons & Dragons, and many others.
The company has filed data breach notification letters with the Massachusetts Attorney General’s Office, but didn’t disclose the total number of affected individuals or when the incident was detected.
“The information involved varied by individual but may have included your name and one or more additional personal information elements such as email, address, phone number, national ID number, or financial information,” Hasbro said.
“Hasbro implemented containment and remediation measures, including disabling the compromised employee account, terminating unauthorized access, and deploying additional safeguards designed to help prevent a similar incident from occurring in the future.”
As detailed in the data breach listing, the breach affected the Social Security numbers, financial account information, credit/debit card numbers, and driver’s license information of 436 Hasbro employees in Massachusetts.
A Hasbro spokesperson was not immediately available for comment when BleepingComputer reached out to ask whether any customers were also affected by this breach and whether the attackers sent a ransom demand.
In early April, Hasbro also disclosed a cyberattack that hit its systems on March 28 and forced the company to take some of them offline while working to restore them.
In a filing with the U.S. Securities and Exchange Commission (SEC) at the time, Hasbro warned investors of “some delays,” and said that interim measures taken for business continuity “may continue for several weeks before the situation is fully resolved.”
According to financial reports filed by Hasbro since then, the company has lost approximately $25 million in revenue because of the cyberattack.
Hasbro didn’t link the March incident with the data breach disclosed in notification letters filed with the Massachusetts attorney general’s office this week.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Carhartt data breach exposes information of 12.9 million accounts
ATF confirms “major incident” after recent Qilin breach claims
French tax authority data breach affects 678,000 individuals
France fines unemployment agency €5 million over data breach
RingCentral data breach exposed info of 1.6 million accounts
Ubiquiti patches three max severity security vulnerabilities
Police arrests dozens of suspects in global cybercrime crackdown
Massive DDoS attack disrupts Norway’s government digital services
Pixellot discovered and secured hundreds of unmanaged AI agent identities in weeks, not months. Download the case study for how.
Protect yourself from data brokers, scammers, and the next data breach with digital identities.
Discover why encryption and key management are critical for modern business.
Learn how ESET MDR can enhance your organization’s security posture
Overdue a password health-check? Audit your Active Directory for free
Discover how least agency keeps your AI tools capable, controlled, and secure.
Terms of Use – Privacy Policy – Ethics Statement – Affiliate Disclosure
Read our posting guidelinese to learn what content is prohibited.
