HASBRO, INC.

Evaluation of disclosure controls and procedures

The Company maintains disclosure controls and procedures, as defined in Rule 13a-15(e) promulgated under the Securities Exchange Act of 1934 (the "Exchange Act"), that are designed to ensure that information required to be disclosed by the Company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission's rules and forms and that such information is accumulated and communicated to the Company's management, including its Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure. The Company carried out an evaluation, under the supervision and with the participation of the Company's management, including the Company's Chief Executive Officer and Chief Financial Officer, of the effectiveness of the design and operation of the Company's disclosure controls and procedures as of September 27, 2026. Based on the evaluation of these disclosure controls and procedures, the Chief Executive Officer and Chief Financial Officer concluded that the Company's disclosure controls and procedures were effective.

Changes in internal control over financial reporting

In late March 2026, the Company identified unauthorized access to its network. Upon discovery, the Company promptly activated its security incident response protocols, implemented containment measures, including proactively taking certain systems offline, and launched an investigation with the assistance of third-party cybersecurity professionals. Simultaneously, the Company implemented its business continuity plans, including manual ordering and processing procedures at a reduced rate of operations in order to continue servicing its customers. However, the incident resulted in disruptions to the Company's standard business operations and internal control over financial reporting during the second quarter. During the disruptions caused by the unauthorized access, the Company deployed additional manual controls in response to preventatively taking certain systems offline to maintain our internal control over financial reporting. As of June 28, 2026, the Company's standard business operations and internal control over financial reporting had resumed and were operating consistent with our pre-incident internal control over financial reporting.

There were no changes in the Company's internal control over financial reporting, as defined in Rule 13a-15(f) promulgated under the Exchange Act, during the quarter ended September 27, 2026 that have materially affected, or are reasonably likely to materially affect, the Company's internal control over financial reporting.