Hasbro — the company behind Monopoly, Nerf, Transformers, Play-Doh, and Dungeons & Dragons — has disclosed a data breach in which attackers gained access to the personal and financial information of an undisclosed number of employees. The company filed breach notification letters with the Massachusetts Attorney General’s Office this week, confirming that exposed data may include names, email addresses, phone numbers, national ID numbers, and financial account information.
According to Massachusetts state records, 436 Hasbro employees in that state were affected, with the breach exposing Social Security numbers, financial account details, credit and debit card numbers, and driver’s license information. Hasbro says it disabled the compromised employee account, terminated unauthorized access, and deployed additional safeguards, but has not disclosed when the incident was detected or whether attackers demanded a ransom. The breach is separate from a cyberattack that hit Hasbro’s systems on March 28 — an incident the company estimated caused roughly $25 million in lost revenue — though Hasbro has not publicly linked the two events.