How many people were affected?

Hasbro has not published a nationwide total. Massachusetts filings identify 436 residents. Hasbro employs on the order of 4,600 people worldwide, most in the United States, so the true count may be larger.

When did the intrusion happen?

Hasbro identified unauthorized access on March 28, 2026, took systems offline, and later estimated about $25 million in lost revenue. Employee notifications reached Massachusetts regulators in late August.

What data was involved?

Hasbro's letter says the information varied by person and may have included name, email, address, phone, national ID number, or financial information. Massachusetts's 2026 breach report lists Social Security numbers, financial accounts, payment cards, and driver's licenses for the 436 residents.

Hasbro Told Massachusetts Workers Their IDs Were in the March Hack

Five months after a March 2026 network intrusion, Hasbro notified Massachusetts that 436 employees there had Social Security numbers and financial data.

TL;DR

—Hasbro told investors about a network intrusion in the spring.
—On March 28, 2026, Hasbro identified unauthorized access to its network, took systems offline, and disrupted order processing and shipping.
—An April 1 Form 8-K described the event under Item 8.01.

Hasbro told investors about a network intrusion in the spring. It told workers about their personal data in August. The March incident, five months later On March 28, 2026, Hasbro identified unauthorized access to its network, took systems offline, and disrupted order processing and shipping. An April 1 Form 8-K described the event under Item 8.01. Financial reporting later put the revenue hit at about $25 million, with more costs expected. The employee-data notice arrived quietly. BleepingComputer reported on August 28 that Hasbro had filed letters with the Massachusetts Attorney General. The letters do not give a national total or a precise detection date for the personal-data piece. Hasbro's Massachusetts notice says the information "varied by individual" and may have included name plus email, address, phone, national ID number, or financial information. Containment, in the company's words, included disabling the compromised employee account and cutting off unauthorized access. Massachusetts's 2026 Data Breach Notification Report, cited by BleepingComputer and SecurityWeek, lists 436 Hasbro employees in the state and includes Social Security numbers, financial account information, credit and debit card numbers, and driver's licenses. SecurityWeek noted Hasbro has roughly 4,600 employees worldwide, most in the United States. A Massachusetts-only figure of 436 is not a ceiling. It is the one number a state filing made public. Hasbro said it was not aware of misuse of the personal data. That is a standard sentence in these letters. It is not evidence that the data stayed put. What is still missing The nationwide count. The full list of data types outside Massachusetts. How the employee account was compromised. Whether the March disruption and the August notices are the same intrusion — Hasbro did not explicitly link them in the letter, though the timing and the "compromised employee account" language sit on the same incident timeline. If you worked at Hasbro in 2026, the practical steps are the usual ones because the company did not give you a better map: freeze credit, watch tax filings, treat any password reused on a work account as burned. Employee breaches are easy to file under "internal." They are not. Payroll files are a packaged identity kit: name, address, government ID, sometimes a card number. The people who ship the toys are the ones holding the bag.