Subject: Re: Security review
From: "McCarthy, Meghan" <[email-masked]>
To: "McGowan, Brian" <[email-masked]>
Date: Thu, 21 Dec 2017 14:34:30 -0800

This is a problem.  This should not be available to the public and needs to be shut down immediately.

From: "McGowan, Brian" <[email-masked]>

Date: Wednesday, December 20, 2017 at 1:57 PM

To: "McCarthy, Meghan" <[email-masked]>

Cc: "Ellis, Joshua" <[email-masked]>

Subject: FW: Security review

Meghan, please see below message from Josh.  Apparently there’s Hasbro content on a hhanimation.com’s site and it’s open to the public.  Let me know what you think.

Brian

From: Ellis, Joshua

Sent: Wednesday, December 20, 2017 4:30 PM

To: McGowan, Brian <[email-masked]>

Subject: Security review

Importance: High

Sensitivity: Confidential

Brian,

During the course of an investigation I discovered additional issues from an animation studio working on episodes of what appears to be a yet to be released kids show. I have briefly documented my findings below.

Main page:

http://www.hhanimation.com/MainPage/Page_Home.php

A few examples:

hzzp://www.hhanimation.com/Chomp/CS_109_Daily_V12.mov

hzzp://www.hhanimation.com/projects/Chomp/Client_Delivery/Audio/CS_Alternate_Wingtip_Line50.zip

Joshua Ellis|Cyber Security|Hasbro|401.431.8176|
[email-masked]