Hasbro Discloses Data Breach Exposing Employee Records

Hasbro has disclosed a data breach that exposed the personal and financial information of an undisclosed number of employees, according to breach notification letters filed with regulators in August 2026.

The toy and game maker said a compromised employee account allowed attackers to access records that varied by individual but could include names, addresses, phone numbers, national ID numbers, and financial account details. In some cases, the exposed data included Social Security numbers, credit and debit card numbers, and driver's license information.

Hasbro linked the breach to a broader cyberattack that forced the company to take systems offline in late March 2026, an incident that reportedly cost the company roughly $11 million in cleanup expenses and delayed about $25 million in product sales, according to earlier company disclosures.

According to a filing with the Massachusetts attorney general's office, at least 436 employees in that state were affected. Hasbro has not disclosed how many employees were impacted company-wide; the toymaker employs roughly 4,600 people globally.

The company said it disabled the compromised account, terminated unauthorized access, and brought in outside cybersecurity experts to investigate. Hasbro is offering identity protection services through a third-party provider to affected employees and says it is not aware of any misuse of the exposed data. No cybercrime group has claimed responsibility for the breach on known leak sites.