Hasbro Discloses Employee Data Breach Involving Financial Information

Hasbro has disclosed a data breach that exposed personal and financial information belonging to an undisclosed number of employees.

Hasbro employee data breach affects personal data

Hasbro notified the Massachusetts Attorney General’s Office about the incident. The company did not say when it detected the breach or how many people were affected overall.

The exposed data varied by individual. It may include names, email addresses, home addresses, phone numbers, national identification numbers and financial information.

According to the Massachusetts 2026 Data Breach Notification Report, the incident affected 436 Hasbro employees in the state. The records may include Social Security numbers, driver’s licence details, financial account information and credit or debit card numbers.

Company says it contained the incident

Hasbro said it disabled the compromised employee account and ended the unauthorised access.

The company also said it introduced additional safeguards to reduce the risk of a similar incident. However, it has not explained how attackers gained access or whether they made a ransom demand.

Hasbro has not confirmed whether the Hasbro employee data breach affected customers.

Earlier cyberattack caused financial losses

In early April, Hasbro disclosed a separate cyberattack that began on March 28. The company took some systems offline while it worked to restore operations.

At the time, Hasbro warned that interim business-continuity measures could remain in place for several weeks.

Financial reports later showed that the March cyberattack had an estimated revenue impact of around $25 million. Hasbro has not linked that incident to the employee data breach now disclosed in Massachusetts.

Employees should remain alert for scams

People affected by the Hasbro employee data breach should watch for unexpected emails, text messages and phone calls. Criminals can use exposed personal details to create convincing phishing attempts.

Employees should avoid sharing passwords, banking information or identification details in response to unsolicited contact. They should also review financial accounts and credit reports for unusual activity.