Toys and games giant Hasbro is notifying its employees that their personal information may have been compromised in a data breach.
The notifications sent to affected individuals provide few details but note that the information disclosed, which varies from person to person, may include names, email addresses, mailing addresses, telephone numbers, ID numbers and financial information.
The information comes from Notification letter that Hasbro submitted to the Massachusetts Attorney General’s Office.
It is unclear how many people have been affected in total, but it is likely in the hundreds or a few thousand. According to the Massachusetts notice, 436 residents are affected and the company employs about 4,600 people worldwide, most of them in the United States, according to Revelio Labs.
Data breach reports do not appear to have been posted on any other AG websites at the time of writing.
The data breach may be related to the cyberattack that targeted Hasbro in late March. In response to the attack, the company took some systems offline, causing disruption.
Safety Week Hasbro has asked to confirm whether the new security breach notification is related to the March cyberattack. The company did not directly answer this question.
A Hasbro spokesman said the company discovered a security incident on its network earlier this year and “took immediate action to resolve the incident,” including launching an investigation with third-party cybersecurity experts to determine what happened and what information may have been accessed.
The investigation revealed that the personal information of some current and former employees may have been accessed during the incident. Hasbro said it was “not aware of any misuse of personal information” and there was no evidence that the information was being misused.
Out of an abundance of caution, the company said it is offering identity protection services to those affected through a third-party provider.
No known cybercrime group has Hasbro listed on their leak website.
Related: ATF confirms cyber incident following ransomware group attack
Related: Sensitive information exposed in Nutex health data breach
Related: Personal information exposed in Apollo Global Data Breach
