Hasbro employee data leaked in breach
Hasbro, the toy and game company behind Monopoly and Transformers, says attackers got into an employee account and reached workers' personal and financial information. The company has not said how many people in total were affected.
- Report priority
- Medium
- Victim
- Hasbro
What is known
Hasbro says an attacker gained access to an employee account inside its systems, then used that access to reach personal and financial records tied to employees before Hasbro disabled the account and cut off the unauthorized access.
What to do
Hasbro has not published a public lookup or said how many employees total were affected, only confirming 436 in Massachusetts through a state filing, so current and former Hasbro employees should watch for a direct notification letter from Hasbro rather than trying to check some other way.
Anyone who receives a notification letter should read it for the specific data exposed and consider a credit freeze or fraud alert given that Social Security numbers, card numbers, and driver's license information were involved for some employees.
Reported details
Hasbro says an attacker got into an employee account inside its network. Using that access, the attacker reached personal and financial information tied to employees, and Hasbro's filing with Massachusetts regulators lists Social Security numbers, financial account information, credit and debit card numbers, and driver's license information for 436 workers in that state. Hasbro disabled the compromised account and cut off the unauthorized access.
Hasbro filed data breach notification letters with the Massachusetts Attorney General's Office without disclosing the total number of people affected or when the incident was detected. Its own letter language describes name plus one or more of email, address, phone number, national ID number, or financial information as exposed; the Massachusetts AG's separate 2026 Data Breach Notification Report lists Social Security numbers, financial account information, credit/debit card numbers, and driver's license information for 436 Hasbro employees in that state specifically. Hasbro has not linked this to a separate March 28 cyberattack it disclosed to the SEC, which took some systems offline and has cost the company about $25 million in revenue; no evidence of customer data exposure or a ransom demand has been confirmed.