Data leak
Hasbro Inc. Data Breach β IT Systems Compromised, Data Stolen, Operations Disrupted
Primary Source βIncident Details
In late March / early April 2026, Hasbro Inc. β the US toy and entertainment conglomerate (maker of Monopoly, Transformers, My Little Pony, Magic: The Gathering, Dungeons & Dragons, and numerous other major brands) β disclosed that its IT systems had been compromised in a cyberattack. Hasbro confirmed that data had been stolen and that some operations were disrupted, and warned that a full IT recovery may take time. Hasbro reported annual revenues of approximately $4.1 billion and employs approximately 7,000 people globally. The company is headquartered in Pawtucket, Rhode Island. At time of initial disclosure, Hasbro had not publicly identified the threat actor responsible, disclosed the nature of the stolen data, or confirmed whether a ransom demand had been made. The company engaged cybersecurity forensics firms to assist with investigation and remediation. Hasbro had previously suffered a breach in 2023 when an employee was found to have leaked confidential business information to an outside party. The 2026 breach is significantly more severe in scope, involving external attackers and confirmed data exfiltration. The incident highlights the ongoing risk of cyberattacks against major consumer goods and entertainment intellectual property holders, whose brand equity, game designs, licensing agreements, and entertainment content represent high-value targets for both financially motivated criminals and nation-state actors seeking intellectual property.
Technical Details
- Initial Attack Vector
- Unknown threat actor gained unauthorized access to Hasbro's corporate IT network and exfiltrated data before being detected; Hasbro took systems offline to contain the spread, disrupting some business operations; specific initial access vector was not publicly disclosed at time of reporting
- Vendor / Product
- Hasbro Inc. corporate IT infrastructure
Timeline
- 2026-03-25 Breach occurred
- 2026-04-02 Publicly disclosed