Hasbro, one of the world’s largest toy and game manufacturers, has revealed that attackers have accessed the personal and financial information of an unknown number of employees.
Founded in 1923, Hasbro is a publicly traded American multinational entertainment corporation on the NASDAQ and owns many brands including Monopoly, Clue, Nerf, Transformers, Play-Doh, Peppa Pig, Scrabble, Magic: The Gathering, Dungeons & Dragons and many others.
The company has filed data breach notification letters with the Massachusetts Attorney General’s Office, but did not disclose the total number of people affected or when the incident was discovered.
“The information in question varied from person to person but could include your name and one or more additional personal information items such as email, address, telephone number, ID number or financial information,” Hasbro said.
“Hasbro has implemented containment and remediation measures, including suspending the compromised employee account, terminating unauthorized access, and providing additional security measures to help prevent a similar incident from occurring in the future.”
While the breach notification letters do not specify the total number of individuals affected or the type of information disclosed in the incident, the breach affected the Social Security numbers, financial account information, credit/debit card numbers and driver’s license information of 436 Hasbro employees in Massachusetts, according to the Massachusetts Attorney General’s Office 2026 Data Breach Reporting Report.
A Hasbro spokesperson could not immediately be reached for comment when BleepingComputer reached out to ask whether customers were also affected by the breach and whether the attackers had made a ransom demand.
Early April, Hasbro also announced a cyber attack that hit its systems on March 28, forcing the company to take some of them offline while it worked on recovery.
Hasbro said in a filing with the U.S. Securities and Exchange Commission at the time warned investors of “some delays” and said that the interim measures taken to ensure business continuity “could last for several weeks before the situation is fully resolved”.
According to financial reports Hasbro has since filed, the company has lost about $25 million in revenue Because of the cyber attack.
Hasbro has not linked the March incident to the data breach disclosed in notification letters filed with the Massachusetts Attorney General’s Office this week.
Overall prevention scores can hide what happens after the first access. Once attackers use valid credentials, prevention drops sharply.
The 2026 Blue Report measures defense technology for technology in 338 million simulations conducted in customer production environments.
