Toy and recreation big Hasbro is notifying workers that their private data might have been compromised in an information breach.
The notifications despatched to affected people include little element, however they point out that the uncovered data, which varies by particular person, might embody names, e mail addresses, postal addresses, cellphone numbers, nationwide ID numbers, and monetary data.
The data comes from notification letters that Hasbro submitted to the Massachusetts Legal professional Common’s Workplace.
It’s unclear what number of people are affected in whole, nevertheless it’s probably a whole bunch or just a few thousand. The Massachusetts notification says 436 residents are impacted and the corporate has roughly 4,600 workers worldwide, most in the USA, based on Revelio Labs information.
Information breach notifications don’t seem to have been revealed on some other AG web site on the time of writing.
The information breach could also be associated to the cyberattack that focused Hasbro in late March. The corporate took some methods offline to reply to the assault, leading to disruptions.
The cyberattack value Hasbro $11 million in direct cleanup bills and delayed one other $25 million in product gross sales resulting from system shutdowns.
SecurityWeek requested Hasbro to substantiate whether or not the brand new breach notification is related to the March cyberattack. The corporate didn’t instantly reply that query.
A Hasbro spokesperson stated the corporate recognized a safety incident involving its community earlier this 12 months and “took quick motion to deal with the incident,” together with launching an investigation with exterior cybersecurity specialists to find out what occurred and what data might have been accessed.
The investigation decided that some present and former workers’ private data might have been accessed throughout the incident. Hasbro stated it’s “not conscious of any misuse of private information” and has no indication the knowledge will probably be misused.
Out of an abundance of warning, the corporate stated it’s providing id safety companies via a third-party supplier to these affected.
No identified cybercrime group has listed Hasbro on its leak web site.
*added data on monetary loss brought on by the cyberattack
Associated: ATF Confirms Cyber Incident After Ransomware Group Claims Assault
Associated: Delicate Data Uncovered in Nutex Well being Information Breach
Associated: Private Data Uncovered in Apollo International Information Breach
