Hasbro says cyberattack knocked systems offline, recovery could take weeks

Hasbro says a cyberattack on its networks over the weekend forced some of its systems offline, and the fallout is expected to last for weeks as the toy giant attempts to fulfill orders and ship products without customer delays.

In a filing with the US Securities and Exchange Commission (SEC) on Wednesday, the Monopoly and Jenga maker said it discovered unauthorized access to its network on Saturday and immediately activated its incident response protocols.

“On March 28th, 2026, Hasbro, Inc. identified unauthorized access to the Company’s network. Upon discovery, the Company promptly activated its security incident response protocols, implemented containment measures, including proactively taking certain systems offline,” the American board and tabletop game manufacturer said.

“The Hasbro incident is a clear reminder that global brands with expansive digital ecosystems are increasingly exposed, not just through customer platforms but across internal systems and supply chains,” says Dr. Darren Williams, Founder and CEO of BlackFog.

Williams also points out that although Hasbro quickly took its systems offline to contain the damage, it shows “how quickly these situations can disrupt operations at scale.”

Investigation into stolen data ongoing

Hasbro said it has brought in outside cybersecurity teams to help investigate and determine the full scope of the impact.

So far, no hacker group has claimed the attack, and it is unknown how much or what data may have been impacted. Hasbro has also not revealed how the attackers breached the network.

The company said it is now “identifying and reviewing files” that may have been affected and will take further action if needed, including sending notifications if required under applicable law.

"What matters most now is whether data exfiltration occurred," says Williams.

“For companies like Hasbro, the combination of customer data, licensing agreements, and intellectual property makes any stolen information highly valuable.”

The data privacy expert says stolen data can “fuel extortion, counterfeit activity, or targeted phishing campaigns – even long after systems are fully restored."

Williams says the Hasbro breach is another reminder for organizations to “prioritize real-time visibility into outbound traffic and focus on detecting and blocking data exfiltration early, because once that data leaves the network, the long-term impact is far harder to control.”

Orders and shipping continue under workarounds

Founded in 1923, Hasbro is one of the biggest names in the global toy industry, touting more than 1,800 brands in its portfolio, including its more recent return to developing original, in-house digital games.

Besides Monopoly and Jenga, the company makes hundreds of popular consumer board games and kids' toys, including Scrabble, Dungeons & Dragons, Battleship, Risk, Clue, the Game of Life, Operation, Nerf, Transformers, Play-Doh, My Little Pony, and even Mr. Potato Head.

For now, Hasbro says it will “continue to take orders, ship products and conduct other key operations” while the issue is being resolved.

However, the company also says customers should expect some delays over the next several weeks, even with temporary workarounds in place.

“The need to run these interim measures may continue for several weeks before the situation is fully resolved and may result in some delays,” it said.

The company also noted that it is “working diligently to resolve the matter” and will continue to take additional measures to secure business operations as the investigation moves forward.

Since late 2025, Hasbro has been moving its headquarters from Pawtucket, Rhode Island, to new offices in Boston and expects the move to be completed by the end of this year. The company’s annual revenue in 2025 was reported at approximately $4.7 billion, according to Macrotrends.

Unlock more exclusive Cybernews content on YouTube.