The parent company of Magic: The Gathering and Dungeons & Dragons is now facing legal action over its handling of a cyberattack. Current and former Hasbro employees filed a class action lawsuit on Thursday 16 April 2026 in federal court in Rhode Island, alleging negligence in protecting personal information and invasion of privacy. The suit claims Hasbro "has not been transparent about what data was accessed or taken, and when."
Run game nights? Backseat Gamer handles RSVPs, waitlists, date polling, and game voting so you can focus on playing.
Start organising for freeIf you have ever purchased directly from Hasbro or hold an account on any of its platforms, the company has still not confirmed whether customer data was compromised. That question has gone unanswered since the breach was detected on 28 March and disclosed to the SEC on 1 April.
The lawsuit shifts attention to how Hasbro handled employee data before and after the attack. Weeks into recovery, employees say they still lack clear answers about what was taken. The extended recovery timeline suggests the attackers had persistent access across multiple systems, which would make the scope of potential data exposure considerably wider than a quick intrusion.
Got a regular group? Create a private community, poll for the best date, vote on games, and let your friends RSVP in one place.
Set up your group for freeDigital platforms like D&D Beyond and MTG Arena stayed online throughout the incident, but physical product shipments have faced delays that are still rippling through retail channels. If you have been waiting on a pre-order through Hasbro's network, that wait may stretch further.
Hasbro's Q1 earnings report is due on 23 April. The wider gaming community will be watching for any disclosure about the financial impact of the breach and whether the lawsuit prompts further detail about what data was exposed.
Sources: WPRI | TechCrunch | Turn to 10
