Subject: Re: MLP Movie Incident Response Follow-Up ***Privileged and Confidential***
From: "Matlach, Nicholas" <[email-masked]>
To: "McGowan, Brian" <[email-masked]>, "Davis, Stephen" <[email-masked]>, "Boulanger, Caroline" <[email-masked]>, "Green, Michael (Security)" <[email-masked]>, "Melanson, Steve" <[email-masked]>, "Ellis, Joshua" <[email-masked]>, "Hutzley, Robert" <[email-masked]>, "Flynn, Crystal" <[email-masked]>, "LaPorte, Jaime" <[email-masked]>, "Swayze, Melissa" <[email-masked]>, "Zoltick, Steven" <[email-masked]>, "Bucher, Tyla" <[email-masked]>, "Gianetti, Ed" <
Date: Thu, 5 Oct 2017 18:47:05 -0400

Hi Brian,

IP Security is working closely with Jeff on determining the source of the leak. We will report back when we have root cause and corrective actions but we are going to keep that investigative process off this main thread.

Adding Rob Fantini for oversight. He has been fully briefed but is out of the office for the next 2 weeks so he should remain on this thread for future updates.

Thanks,

Nick

Nicholas Matlach, Esq., CISA, CIPP/IT

Manager Global IP Security

Desk: (401) 548-7997

Mobile: (401) 215-7183

[email-masked]

From: McGowan, Brian

Sent: Thursday, October 5, 2017 6:41:49 PM

To: Davis, Stephen; Boulanger, Caroline; Matlach, Nicholas; Green, Michael (Security); Melanson, Steve; Ellis, Joshua; Hutzley, Robert; Flynn, Crystal; LaPorte, Jaime; Swayze, Melissa; Zoltick, Steven; Bucher, Tyla; Gianetti, Ed; Curtis, Jeff; Langston,
Elizabeth

Cc: McGowan, Brian

Subject: RE: MLP Movie Incident Response Follow-Up ***Privileged and Confidential***

All, apologies for the duplication – I added Elizabeth Langston to the thread

All, we’ll use this thread for internal updates. This distribution includes Hasbro employees only.  Please add others as you see appropriate.

Here’s the action plan following the Thursday call with Lionsgate:

1.
Continue to work on takedowns - LG will take the lead and work with their vendors to continue to remove the movie from websites and links in search engines

1.
Investigate source of the leak

a.
Jeff – Can you provide a list of all employees who had access to the movie file?  Do you know who had custody of the file to show the movie at HASCON?  (Steve already requested this one)

b.
The IT security team will analyze if the file was transferred from inside the Hasbro network (leveraging the names provided from above)

c.
Nick – please continue to take the lead on analyzing the file we downloaded in an attempt to determine the source; please work with Jeff to analyze the file

d.
Lionsgate will continue to evaluate the file in their possession to determine the source; I’ll coordinate with LJ and include Nick

Please reply if there are any other steps I missed.  Thank  you, Brian

From: McGowan, Brian

Sent: Tuesday, October 3, 2017 5:09 PM

To: Davis, Stephen <[email-masked]>; Boulanger, Caroline <[email-masked]>; Hendrickson, Katy <[email-masked]>; Peterson, Kristina <[email-masked]>; Matlach, Nicholas <[email-masked]>; Green,
Michael (Security) <[email-masked]>; Melanson, Steve <[email-masked]>; Ellis, Joshua <[email-masked]>; Hutzley, Robert <[email-masked]>; Flynn, Crystal <[email-masked]>; LaPorte, Jaime <[email-masked]>;
Swayze, Melissa <[email-masked]>; Zoltick, Steven <[email-masked]>; Bucher, Tyla <[email-masked]>; Gianetti, Ed <[email-masked]>

Cc: McGowan, Brian <[email-masked]>

Subject: MLP Movie Incident Response Follow-Up ***Privileged and Confidential***

All,

Thanks for joining the 1:30 call on such short notice.  We continue to see the MLP movie proliferate on websites and have now seen it on YouTube (although the videos were taken down and continue to get taken down as they pop up).

We identified the following follow up items.  I’ll continue to coordinate responses and update this group as we make progress.  Please note the most pressing item is to have the movie removed from websites and YouTube, which Jaime will
coordinate with Lionsgate.

Remove movie files from websites (Jaime LaPorte to coordinate with Lionsgate) (please note that we continue to see more sites hosting the movie.  Does Lionsgate have a process to monitor
those sites and have the movie removed from them?)

Monitor for additional distribution of the movie especially on social sites (Matt Orsi/Analytics).  This is

Action

Owner

Status

Remove movie files from websites

Jaime LaPorte/Legal

In progress with Lionsgate support

Monitor for additional distribution of the movie especially on social sites

Matt Orsi/Analytics

Completed – we’re actively monitoring social sites and websites for the MLP movie

Analyze movie file to determine the cause of the leak

Nick Matlach/Corp Security

In progress – IT security provided the file to Nick, who will coordinate with Lionsgate

Analyze Hasbro systems for potential internal leak indicators

Josh Ellis/IT Security

In progress

Meeting Attendees:

Stephen Davis, Tyla Bucher

Jaime LaPorte, Caroline Boulanger, Melissa Swayze

Katy Hendrickson, Kristina Peterson, Crystal Flynn

Nick Matlach, Michael Green, Ed Gianetti

Steve Zoltick, Steve Melanson, Brian McGowan, Josh Ellis, Bob Hutzley, Ken Sambrook