TAKEDA PHARMACEUTICALS U.S.A., INC.

Takeda Pharmaceuticals USA, Inc. notified the New Hampshire Attorney General of a security incident where an unauthorized third party compromised employee credentials via voice phishing (vishing) around February 9, 2026. The actor exfiltrated files containing personal information (name, SSN, DOB, driver's license) of 5 New Hampshire residents between February 9 and 21, 2026. Takeda discovered the breach on February 23, 2026, contained it, and began notifying affected individuals on May 29, 2026, offering 24 months of credit monitoring.