Hasbro has disclosed a data breach involving employee information, with compromised records potentially containing financial details and sensitive identification data. The toy and entertainment company has not revealed how many people were affected overall.
The incident became public through breach notification documents submitted to the Massachusetts Attorney General’s Office. According to Hasbro’s notification, an unauthorized party gained access through a compromised employee account. The company has not disclosed when it discovered the intrusion or how long the attacker maintained access.
Information exposed in the breach differed depending on the individual. Hasbro said affected records could contain names alongside email addresses, physical addresses, telephone numbers, national identification numbers, or financial information.
Massachusetts regulatory records provide additional details about employees in that state. According to the state’s 2026 Data Breach Notification Report, 436 Massachusetts employees were affected. Information associated with those individuals included Social Security numbers, financial account information, credit or debit card numbers, and driver’s license information.
Hasbro said it disabled the compromised employee account and terminated the unauthorized access after responding to the incident. The company also implemented additional security measures intended to reduce the likelihood of a similar compromise occurring again.
It remains unclear whether the breach extended beyond employee information. Hasbro has not publicly confirmed that customer data was involved, and there is currently no disclosed information indicating whether the attackers demanded a ransom.
The breach comes several months after Hasbro dealt with a separate cybersecurity incident that disrupted parts of its operations. On March 28, the company experienced a cyberattack that resulted in some systems being taken offline while recovery work was underway.
Hasbro subsequently warned investors that the incident was causing delays and that temporary business continuity measures could remain necessary for several weeks. Later financial disclosures estimated that the March cyberattack reduced company revenue by approximately $25 million.
Despite the proximity of the two security disclosures, Hasbro has not established a public connection between them. The company has not stated that the employee information disclosed in the Massachusetts filings was obtained during the March attack.
Hasbro, founded in 1923, is a major American toy, gaming, and entertainment company whose portfolio includes brands and properties such as Monopoly, Nerf, Transformers, Play-Doh, Magic: The Gathering, and Dungeons & Dragons.