Loading story…
Hasbro disclosed that attackers accessed personal and financial information belonging to current and former employees after compromising an employee account. Data exposed varied by individual and included names and contact details, Social Security or other national identification numbers, financial-account and payment-card details, and driver’s-license information. Massachusetts notification records show 436 affected employees in the state.
Hasbro said it disabled the compromised account, terminated unauthorized access, and added safeguards. The company reported no known misuse of the information and is offering identity-protection services to affected individuals. It did not confirm whether the breach was linked to the late-March cyberattack that disrupted operations and reportedly cost roughly $25 million in lost revenue; no threat actor had publicly claimed responsibility.
See attribution, scope, and your downstream exposure.
6 events from the most recent confirmed update back to the earliest known activity.
A cyberattack forced Hasbro to take some systems offline and disrupted operations. Hasbro later attributed approximately $25 million in lost revenue to the incident, while not confirming it was related to the employee-data breach.
Hasbro identified a security incident involving its network earlier in 2026. Its investigation found that personal information of current and former employees may have been accessed.
Hasbro notified relevant law-enforcement authorities after detecting unauthorized access to its internal network and beginning its investigation into the employee-data breach.
Hasbro said it disabled the compromised employee account, terminated unauthorized access, and deployed additional safeguards. It engaged external cybersecurity experts and offered affected individuals third-party identity-protection services; it reported no known misuse of the data.
Hasbro submitted breach-notification letters to the Massachusetts Attorney General and notified affected current and former employees that personal and financial information may have been accessed. The Massachusetts filing listed 436 affected residents, with exposed data potentially including Social Security numbers, financial-account or payment-card information, and driver's-license information.
The March cyberattack reportedly caused approximately $11 million in direct response and cleanup costs, alongside roughly $25 million in lost revenue from operational disruption.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
5 references tracked. Mallory keeps watching after this page renders.
teiss.co.uk
Open sourcesecuritymagazine.com
Open sourcecysecurity.news
Open sourcesecurityweek.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hasbro disclosed that it suffered a cyberattack involving unauthorized access, detected on March 28, and responded by taking some systems offline to contain the intrusion. The company said it activated incident response procedures, brought in third-party cybersecurity specialists, and is still investigating the scope of the breach and what data may have been affected. The incident has disrupted parts of Hasbro's operations, including its ability to process orders and ship products, forcing the company to rely on business continuity measures while remediation continues. Hasbro warned that these interim arrangements and related delays could remain in place for several weeks, and said it will issue notifications if the ongoing review determines that legally protected data was compromised; no threat actor had publicly claimed responsibility at the time of disclosure.
Jun 29, 2026
Hasbro disclosed that a sophisticated cyber intrusion hit the company on March 28 and forced some systems offline, disrupting order processing, shipping, and invoicing across parts of its business. The toy and entertainment company, known for brands including **Peppa Pig**, **Transformers**, and **Magic: The Gathering**, said the incident may have exposed certain internal systems and triggered delays for customers, while the full scope of the breach and any potential data compromise remain under investigation. The company said it contained the attack and brought in third-party cybersecurity and forensic specialists to support containment, assessment, and recovery, but warned that restoration would take weeks and that the disruption is expected to affect second-quarter revenue and operating profit. Hasbro said business continuity measures have allowed some orders and shipments to continue, including planned releases, and it expects most delayed activity to be recovered later in the year, while also incurring investigation and advisory costs and delaying its first-quarter earnings release.
Jun 29, 2026
Toys R Us Canada notified customers that attackers accessed their customer database, stole personal information, and subsequently posted the data online. The breach was discovered on July 30, 2025, after threat actors claimed to have published the stolen data on the unindexed internet. The compromised information includes names, addresses, phone numbers, and email addresses, but does not include passwords, credit card details, or other highly confidential data. The company engaged third-party cybersecurity experts to investigate and contain the incident and is in the process of reporting the breach to Canadian privacy authorities. Customers have been advised to remain vigilant against phishing attempts and unsolicited communications that may impersonate Toys R Us. While the company has upgraded its IT security systems following the breach, it has not offered free identity or fraud monitoring services to affected individuals. The total number of impacted customers has not been disclosed, but the incident highlights the risks of identity fraud, phishing, and other malicious activities that can result from the exposure of personal information online.
Jun 29, 2026