Hasbro has disclosed that attackers accessed the personal and financial information of an undisclosed number of employees, BleepingComputer reported on 28 August 2026.

According to BleepingComputer, Hasbro filed data breach notification letters with the Massachusetts Attorney General's Office but did not disclose the total number of people affected or when the incident was detected. BleepingComputer quotes the letters: "The information involved varied by individual but may have included your name and one or more additional personal information elements such as email, address, phone number, national ID number, or financial information," and "Hasbro implemented containment and remediation measures, including disabling the compromised employee account, terminating unauthorized access, and deploying additional safeguards designed to help prevent a similar incident from occurring in the future."

Citing the Massachusetts Attorney General's Office 2026 Data Breach Notification Report, BleepingComputer says the Social Security numbers, financial account information, credit/debit card numbers and driver's licence information of 436 Hasbro employees in Massachusetts were affected. Hasbro did not link this breach to the cyberattack that hit its systems on 28 March, according to BleepingComputer.

Correction (28 Oct 2026): the Massachusetts letter and breach-list pages return HTTP 403 to Cyberstack, so their links, the letter number and a line on customer impact were removed; the details above are credited to BleepingComputer, which quotes the letters. (source: BleepingComputer)