Cyberattack at Toy Maker Hasbro

Multinational toy manufacturing and media company, Hasbro, Inc. suffered a cyberattack where personally identifiable information ended up stolen in the hack.
Pawtucket, RI-based Hasbro said it implemented containment and remediation measures, including disabling the compromised employee account, terminating unauthorized access, and deploying additional safeguards designed to help prevent a similar incident from occurring in the future. The company disclosed attackers accessed the personal and financial information of an undisclosed number of employees.
Information stolen in the attack involved name and one or more additional personal information elements such as email, address, phone number, national ID number, or financial information, credit or debit card, social security and driver’s license numbers.
Hasbro told Massachusetts regulators the attack traced back to vishing and social engineering, the practice of tricking an employee or help-desk worker into handing over access rather than breaking through a technical defense.

Estimated Cost

$36 million to date. Direct incremental expenses related to the unauthorized access were $11 million during the three and six months ended June 28 this year, and the revenue impact on the business ended up estimated at $25 million.

Threat Source

Impacts

IT