Takeda Pharmaceuticals USA Investigated Following Credential-Based Data Breach Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is examining a security incident involving Takeda Pharmaceuticals USA, Inc., the U.S. subsidiary of Japan-based Takeda Pharmaceutical Co. Ltd. The breach, discovered on February 23, 2026, stemmed from the compromise of an employee’s credentials by an unauthorized third party. Takeda, a global biopharmaceutical company founded in 1781 and operating in 80 countries, maintains its U.S. headquarters in Lexington, Massachusetts. The company focuses on therapeutic areas including oncology, rare diseases, and vaccines. After detecting the intrusion, Takeda contained the incident and notified law enforcement the same day. A subsequent investigation concluded on April 24, 2026, that the unauthorized party may have accessed files containing personally identifiable information (PII). By May 5, 2026, the company confirmed that sensitive data including names, Social Security numbers, driver’s licenses, financial account details, medical records, and dates of birth had been exposed for some individuals. Takeda reported the breach to the Massachusetts Attorney General’s office on June 2, 2026, and to the New Hampshire Attorney General’s office on May 29, 2026. Legal representatives are now assessing potential compensation claims for affected individuals.