Subject: Re: MLP Movie Incident Response Follow-Up ***Privileged and Confidential*** - IT ONLY THREAD
From: "Zoltick, Steven" <[email-masked]>
To: "McGowan, Brian" <[email-masked]>, "Melanson, Steve" <[email-masked]>
Cc: "Ellis, Joshua" <[email-masked]>
Date: Fri, 6 Oct 2017 08:04:42 -0400

Thanks

Steve Davis scheduled a call for a couple of us at 230. I am sure Jeff updated him.

Steven Zoltick

SVP & Chief Information Officer

This e-mail and any attachments may contain confidential and/or privileged information for the use of the designated recipient named above.  If you are not the
intended recipient and received it in error, please notify the sender immediately and delete the e-mail including attachments.  Any other use of this e-mail or its contents is prohibited.

-------- Original message --------

From: "McGowan, Brian" <[email-masked]>

Date: 10/5/17 9:36 PM (GMT-05:00)

To: "Zoltick, Steven" <[email-masked]>, "Melanson, Steve" <[email-masked]>

Cc: "Ellis, Joshua" <[email-masked]>

Subject: RE: MLP Movie Incident Response Follow-Up ***Privileged and Confidential*** - IT ONLY THREAD

Steve, Steve Z,

I spoke with Nick a few moments ago.  He and Jeff analyzed the file we downloaded and it has an MLP image on it that clarifies the source and distribution.  It came from a third-party producer and went to Burbank (reportedly via Media Exchange).
Once at Burbank it was stored on an internal server.  At this point we’re looking at either that third-party or a Hasbro employee as the source of the leak.

We’re awaiting the names of the employees who have access to the server as well as the server name.  We’ll work on taking forensic images of those employees’ laptops and will look to see what we can derive from the server. We’ll see what
we can find internally and then will work with Nick and team to look at the producer.  As you might imagine this is getting more sensitive since we’re starting to look at employees. We’ll look to limit what we communicate via the main thread and in discussions
with the larger team.  Steve Z, we may want to let Steve D know this is turning from incident response to internal investigation so information won’t flow as freely.

Let me know if you want to discuss – I’m up watching the game.

Brian

From: Zoltick, Steven

Sent: Thursday, October 5, 2017 7:25 PM

To: McGowan, Brian <[email-masked]>

Cc: Melanson, Steve <[email-masked]>

Subject: Re: MLP Movie Incident Response Follow-Up ***Privileged and Confidential***

Thanks Brian good summary

Steven Zoltick

SVP & Chief Information Officer

This e-mail and any attachments may contain confidential and/or privileged information for the use of the designated recipient named above.  If you are not the
intended recipient and received it in error, please notify the sender immediately and delete the e-mail including attachments.  Any other use of this e-mail or its contents is prohibited.

-------- Original message --------

From: "McGowan, Brian" <[email-masked]>

Date: 10/5/17 6:41 PM (GMT-05:00)

To: "Davis, Stephen" <[email-masked]>, "Boulanger, Caroline" <[email-masked]>, "Matlach, Nicholas" <[email-masked]>, "Green, Michael (Security)" <[email-masked]>, "Melanson, Steve" <[email-masked]>,
"Ellis, Joshua" <[email-masked]>, "Hutzley, Robert" <[email-masked]>, "Flynn, Crystal" <[email-masked]>, "LaPorte, Jaime" <[email-masked]>, "Swayze, Melissa" <[email-masked]>, "Zoltick, Steven" <[email-masked]>,
"Bucher, Tyla" <[email-masked]>, "Gianetti, Ed" <[email-masked]>, "Curtis, Jeff" <[email-masked]>, "Langston, Elizabeth" <[email-masked]>

Cc: "McGowan, Brian" <[email-masked]>

Subject: RE: MLP Movie Incident Response Follow-Up ***Privileged and Confidential***

All, apologies for the duplication – I added Elizabeth Langston to the thread

All, we’ll use this thread for internal updates. This distribution includes Hasbro employees only.  Please add others as you see appropriate.

Here’s the action plan following the Thursday call with Lionsgate:

1.
Continue to work on takedowns - LG will take the lead and work with their vendors to continue to remove the movie from websites and links in search engines

1.
Investigate source of the leak

a.
Jeff – Can you provide a list of all employees who had access to the movie file?  Do you know who had custody of the file to show the movie at HASCON?  (Steve already requested this one)

b.
The IT security team will analyze if the file was transferred from inside the Hasbro network (leveraging the names provided from above)

c.
Nick – please continue to take the lead on analyzing the file we downloaded in an attempt to determine the source; please work with Jeff to analyze the file

d.
Lionsgate will continue to evaluate the file in their possession to determine the source; I’ll coordinate with LJ and include Nick

Please reply if there are any other steps I missed.  Thank  you, Brian

From: McGowan, Brian

Sent: Tuesday, October 3, 2017 5:09 PM

To: Davis, Stephen <[email-masked]>; Boulanger, Caroline <[email-masked]>; Hendrickson, Katy <[email-masked]>; Peterson, Kristina <[email-masked]>; Matlach, Nicholas <[email-masked]>; Green,
Michael (Security) <[email-masked]>; Melanson, Steve <[email-masked]>; Ellis, Joshua <[email-masked]>; Hutzley, Robert <[email-masked]>; Flynn, Crystal <[email-masked]>; LaPorte, Jaime <[email-masked]>;
Swayze, Melissa <[email-masked]>; Zoltick, Steven <[email-masked]>; Bucher, Tyla <[email-masked]>; Gianetti, Ed <[email-masked]>

Cc: McGowan, Brian <[email-masked]>

Subject: MLP Movie Incident Response Follow-Up ***Privileged and Confidential***

All,

Thanks for joining the 1:30 call on such short notice.  We continue to see the MLP movie proliferate on websites and have now seen it on YouTube (although the videos were taken down and continue to get taken down as they pop up).

We identified the following follow up items.  I’ll continue to coordinate responses and update this group as we make progress.  Please note the most pressing item is to have the movie removed from websites and YouTube, which Jaime will
coordinate with Lionsgate.

Remove movie files from websites (Jaime LaPorte to coordinate with Lionsgate) (please note that we continue to see more sites hosting the movie.  Does Lionsgate have a process to monitor those sites and have the
movie removed from them?)

Monitor for additional distribution of the movie especially on social sites (Matt Orsi/Analytics).  This is

Action

Owner

Status

Remove movie files from websites

Jaime LaPorte/Legal

In progress with Lionsgate support

Monitor for additional distribution of the movie especially on social sites

Matt Orsi/Analytics

Completed – we’re actively monitoring social sites and websites for the MLP movie

Analyze movie file to determine the cause of the leak

Nick Matlach/Corp Security

In progress – IT security provided the file to Nick, who will coordinate with Lionsgate

Analyze Hasbro systems for potential internal leak indicators

Josh Ellis/IT Security

In progress

Meeting Attendees:

Stephen Davis, Tyla Bucher

Jaime LaPorte, Caroline Boulanger, Melissa Swayze

Katy Hendrickson, Kristina Peterson, Crystal Flynn

Nick Matlach, Michael Green, Ed Gianetti

Steve Zoltick, Steve Melanson, Brian McGowan, Josh Ellis, Bob Hutzley, Ken Sambrook