Hasbro Says Employee Data May Have Been Accessed in Security Incident

· Original article ↗

Summary

Hasbro says an investigation found current and former employees’ personal information may have been accessed. Massachusetts filings cite 436 affected residents; the company is offering identity-protection services. A link to a March cyberattack remains unclear.

Key points

  • Hasbro’s investigation determined that some current and former employees’ personal information may have been accessed during a security incident earlier this year.
  • Potentially affected information varies by person and may include names, contact details, national ID numbers and financial information.
  • Hasbro’s notification to the Massachusetts Attorney General’s Office lists 436 affected residents; the total number affected is unknown.
  • Hasbro did not directly confirm whether the incident is connected to the cyberattack that targeted the company in late March.
  • The March cyberattack led Hasbro to take some systems offline, causing disruptions; the company reported $11 million in direct cleanup costs and $25 million in delayed product sales.
  • Hasbro said it is not aware of misuse of the personal information and is offering affected individuals identity-protection services.

Article Details

Victim Organization
Hasbro
Incident Type
Cyberattack and data breach; the investigation found that some current and former employees' personal information may have been accessed.
Data Types Exposed
  • Names
  • Email addresses
  • Postal addresses
  • Phone numbers
  • National ID numbers
  • Financial information
Affected Records
436 Massachusetts residents were reported as impacted; the total is unknown. The article estimates hundreds or a few thousand people may be affected.
Operational Impact
Hasbro took some systems offline in response to the late-March cyberattack, causing disruptions. The attack resulted in $11 million in direct cleanup expenses and delayed $25 million in product sales.
Ransom Or Extortion
No ransom or extortion was reported. No known cybercrime group had listed Hasbro on its leak website.
Claim Status
confirmed

Countries