Hasbro Data Breach Exposes Social Security Numbers and More

Hasbro Inc., the American toy and game company known for iconic brands including Transformers, Monopoly, Nerf, Play-Doh and Dungeons & Dragons, disclosed a data breach after unauthorized actors accessed its network in late March 2026.

The breach was reported to attorneys general in Rhode Island and Vermont on Oct. 7, 2026, with 608 Rhode Island residents identified as affected. Massachusetts records list 436 residents of that state, reported Aug. 25, 2026. Hasbro has not said how many people were affected in total. Hasbro discovered the breach on March 28, 2026, and began sending notification letters to affected individuals on Sept. 30, 2026.

Through a vishing and social engineering campaign, an unauthorized actor obtained valid login credentials and used them to access certain Hasbro systems between March 27 and March 28, 2026.

On or about April 3, 2026, a separate unauthorized actor used information from the earlier breach to gain access to an employee's Hasbro account. Hasbro detected the second unauthorized activity on April 4, 2026, and took action to stop it.

On April 1, 2026, between the two phases of the attack, Hasbro filed an 8-K report with the Securities and Exchange Commission disclosing the incident. In the filing, the company stated that its investigation was ongoing and that it was working diligently to determine the full scope of the impact.

As part of its continuing file review, Hasbro determined on Sept. 23, 2026, that certain files may have contained personal information of individuals.

The types of personal information potentially exposed included Social Security numbers, driver's license numbers, financial account information, payment card information, usernames, email addresses and passwords.

Hasbro's response to the breach

Hasbro stated it continues to analyze the affected data and will provide additional notifications as appropriate.

The notification letters sent to affected individuals describe the incident, the types of information involved, and protective steps people can take. They also include instructions for enrolling in complimentary credit monitoring and identity theft protection services.

Hasbro is offering free identity protection services through Epiq Privacy Solutions ID. People can enroll at privacysolutionsid.com or by calling 866-675-2006, Monday through Friday from 9 a.m. to 5:30 p.m. Eastern time. People with questions about the incident can call 888-780-5138, Monday through Friday from 6 a.m. to 6 p.m. Pacific time.

A class action lawsuit, Standing v. Hasbro, Inc., was filed over this breach in federal court in Rhode Island on April 16, 2026.