GoKawiilAmerican toy-making giant Hasbro has confirmed a cyberattack, and the company says it may take “several weeks” before the incident is resolved.
The owner of properties including Transformers, Peppe Pig, and Dungeons & Dragons said in a legally required disclosure with the U.S. Securities and Exchange Commission on Wednesday that it detected an intrusion on March 28, which prompted the company to take down some of its systems.
Hasbro said it has implemented and continues to roll out business continuity plans to allow it to “take orders, ship product and conduct other key operations while it resolves this situation.”
Parts of Hasbro’s website appeared down as of Wednesday, when checked by TechCrunch. One error message said the site was “currently undergoing maintenance.”
The company said it has called cybersecurity professionals to help, but noted that it was continuing to “implement measures to secure its business operations,” suggesting that the hackers may still be in the company’s systems.
It’s not known what specific kind of cyberattack, such as ransomware, was detected.
When reached by TechCrunch, Hasbro spokesperson Andrea Snyder reiterated much of the SEC filing and said the company had “taken swift action to protect our systems and data,” but would not answer questions about the nature of the cyberattack, or if the company has had any communication from the hackers, such as a demand for money.
Hackers increasingly target large companies to steal data and extort corporate victims for ransom, but also cause disruption to operations that can have lasting financial damage. A cyberattack at Jaguar Land Rover in 2025 stalled carmaking production lines for months, prompting the U.K. government to step in with a $1.5 billion bailout guarantee to prevent the company and its supply chain from going under.
In its public notice to investors, Hasbro warned of delays, citing the need to run these interim measures for “several weeks before the situation is fully resolved.”
The company said it was not immediately known if any data was stolen, and that its investigation is ongoing to determine the full scope of the breach.
... continue reading