Loading story…
Hasbro disclosed that a sophisticated cyber intrusion hit the company on March 28 and forced some systems offline, disrupting order processing, shipping, and invoicing across parts of its business. The toy and entertainment company, known for brands including Peppa Pig, Transformers, and Magic: The Gathering, said the incident may have exposed certain internal systems and triggered delays for customers, while the full scope of the breach and any potential data compromise remain under investigation.
The company said it contained the attack and brought in third-party cybersecurity and forensic specialists to support containment, assessment, and recovery, but warned that restoration would take weeks and that the disruption is expected to affect second-quarter revenue and operating profit. Hasbro said business continuity measures have allowed some orders and shipments to continue, including planned releases, and it expects most delayed activity to be recovered later in the year, while also incurring investigation and advisory costs and delaying its first-quarter earnings release.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
In a later SEC filing, Hasbro said the attack had been contained but restoration was still ongoing and that delays from the incident were expected to affect second-quarter revenue and operating profit. The company also said most delayed business should be recovered in the second half of the year, while it incurred investigation and advisory costs and delayed its first-quarter earnings release.
Hasbro publicly disclosed the cyberattack in SEC-related reporting, saying the incident could disrupt manufacturing, order processing, shipping, and invoicing while the full scope remained under investigation. Early reporting noted recovery could take weeks and raised uncertainty over whether ransomware or customer-data compromise was involved.
Hasbro disclosed that it suffered a sophisticated cyber intrusion on 2026-03-28. The company began containment and assessment efforts with third-party cybersecurity and forensic specialists, and some internal systems were taken offline.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
5 references tracked. Mallory keeps watching after this page renders.
cybersecuritydive.com
Open sourcecybersecurity-insiders.com
Open sourcecybernews.com
Open sourcecybersecuritydive.com
Open sourcebbc.co.uk
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hasbro disclosed that it suffered a cyberattack involving unauthorized access, detected on March 28, and responded by taking some systems offline to contain the intrusion. The company said it activated incident response procedures, brought in third-party cybersecurity specialists, and is still investigating the scope of the breach and what data may have been affected. The incident has disrupted parts of Hasbro's operations, including its ability to process orders and ship products, forcing the company to rely on business continuity measures while remediation continues. Hasbro warned that these interim arrangements and related delays could remain in place for several weeks, and said it will issue notifications if the ongoing review determines that legally protected data was compromised; no threat actor had publicly claimed responsibility at the time of disclosure.
Jun 29, 2026
Hasbro disclosed that attackers accessed personal and financial information belonging to current and former employees after compromising an employee account. Data exposed varied by individual and included names and contact details, Social Security or other national identification numbers, financial-account and payment-card details, and driver’s-license information. Massachusetts notification records show **436** affected employees in the state. Hasbro said it disabled the compromised account, terminated unauthorized access, and added safeguards. The company reported no known misuse of the information and is offering identity-protection services to affected individuals. It did not confirm whether the breach was linked to the late-March cyberattack that disrupted operations and reportedly cost roughly $25 million in lost revenue; no threat actor had publicly claimed responsibility.
Sep 2, 2026
Boston Scientific disclosed a cyberattack that disrupted IT systems globally, causing a network outage that limited access to operating systems and business applications. The outage has impaired the medical-device manufacturer’s ability to process and ship customer orders, creating potential supply-chain and revenue impacts. The company activated incident-response procedures and engaged external cybersecurity specialists to investigate and contain the incident. Boston Scientific has not identified an attacker, intrusion vector, malware, data theft, or impact to customer devices and implants; it is still assessing whether production, quality, operational, or financial systems were affected. Restoration timing remains unknown, and regulated manufacturing recovery may require validation of production and quality-record integrity before normal operations resume.
Aug 27, 2026