Loading story…
Hasbro disclosed that it suffered a cyberattack involving unauthorized access, detected on March 28, and responded by taking some systems offline to contain the intrusion. The company said it activated incident response procedures, brought in third-party cybersecurity specialists, and is still investigating the scope of the breach and what data may have been affected.
The incident has disrupted parts of Hasbro's operations, including its ability to process orders and ship products, forcing the company to rely on business continuity measures while remediation continues. Hasbro warned that these interim arrangements and related delays could remain in place for several weeks, and said it will issue notifications if the ongoing review determines that legally protected data was compromised; no threat actor had publicly claimed responsibility at the time of disclosure.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
On 2026-04-01, Hasbro publicly disclosed the incident in an SEC filing, said business continuity measures were in place, and warned that delays and interim operating measures could continue for several weeks while the investigation into potentially affected data remained ongoing.
After detecting the intrusion, Hasbro proactively took certain systems offline as a containment measure. The disruption affected parts of its operations, including order processing and product shipping.
On 2026-03-28, Hasbro discovered unauthorized access in a cyberattack, activated its incident response procedures, and engaged third-party cybersecurity professionals to investigate and remediate the intrusion.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
11 references tracked. Mallory keeps watching after this page renders.
boingboing.net
Open sourcedatabreaches.net
Open sourcesecurityaffairs.com
Open sourcescworld.com
Open sourcesec.gov
Open sourcedarkwebinformer.com
Open sourcehelpnetsecurity.com
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hasbro disclosed that a sophisticated cyber intrusion hit the company on March 28 and forced some systems offline, disrupting order processing, shipping, and invoicing across parts of its business. The toy and entertainment company, known for brands including **Peppa Pig**, **Transformers**, and **Magic: The Gathering**, said the incident may have exposed certain internal systems and triggered delays for customers, while the full scope of the breach and any potential data compromise remain under investigation. The company said it contained the attack and brought in third-party cybersecurity and forensic specialists to support containment, assessment, and recovery, but warned that restoration would take weeks and that the disruption is expected to affect second-quarter revenue and operating profit. Hasbro said business continuity measures have allowed some orders and shipments to continue, including planned releases, and it expects most delayed activity to be recovered later in the year, while also incurring investigation and advisory costs and delaying its first-quarter earnings release.
Jun 29, 2026
Hasbro disclosed that attackers accessed personal and financial information belonging to current and former employees after compromising an employee account. Data exposed varied by individual and included names and contact details, Social Security or other national identification numbers, financial-account and payment-card details, and driver’s-license information. Massachusetts notification records show **436** affected employees in the state. Hasbro said it disabled the compromised account, terminated unauthorized access, and added safeguards. The company reported no known misuse of the information and is offering identity-protection services to affected individuals. It did not confirm whether the breach was linked to the late-March cyberattack that disrupted operations and reportedly cost roughly $25 million in lost revenue; no threat actor had publicly claimed responsibility.
Sep 2, 2026
Boston Scientific disclosed a cyberattack that disrupted IT systems globally, causing a network outage that limited access to operating systems and business applications. The outage has impaired the medical-device manufacturer’s ability to process and ship customer orders, creating potential supply-chain and revenue impacts. The company activated incident-response procedures and engaged external cybersecurity specialists to investigate and contain the incident. Boston Scientific has not identified an attacker, intrusion vector, malware, data theft, or impact to customer devices and implants; it is still assessing whether production, quality, operational, or financial systems were affected. Restoration timing remains unknown, and regulated manufacturing recovery may require validation of production and quality-record integrity before normal operations resume.
Aug 27, 2026