Toy and game giant Hasbro is notifying employees that their personal information may have been compromised in a data breach.
The notifications sent to affected individuals contain little detail, but they indicate that the exposed information, which varies by individual, may include names, email addresses, postal addresses, phone numbers, national ID numbers, and financial information. The information comes from notification letters that Hasbro submitted to the Massachusetts Attorney General’s Office.
It’s unclear how many individuals are affected in total, but it’s likely hundreds or a few thousand. The Massachusetts notification states that 436 residents are impacted, and the company has roughly 4,600 employees worldwide, most in the United States, according to Revelio Labs data.
The data breach may be related to a cyberattack that targeted Hasbro in late March, which resulted in some systems being taken offline to respond to the attack. A Hasbro spokesperson mentioned that the company identified a security incident involving its network earlier this year and “took immediate action to address the incident,” including launching an investigation with outside cybersecurity experts.
The investigation determined that some current and former employees’ personal information may have been accessed during the incident. Hasbro stated it is “not aware of any misuse of personal data” and has no indication that the information will be misused. Out of an abundance of caution, the company is offering identity protection services through a third-party provider to those affected.
No known cybercrime group has listed Hasbro on its leak website.
For further details, refer to the original article by SecurityWeek.
Follow Cyber Warriors Middle East for further global cybersecurity developments.
