Hasbro Suffers Cyberattack, Disrupting Operations and Potentially Compromising Data

Toy and entertainment giant Hasbro has confirmed it was the victim of a significant cyberattack discovered on March 28. The breach has led to the disruption of key business operations, including order processing and product shipping, with the company warning that a full recovery could take several weeks. While Hasbro has implemented business continuity plans to maintain operations, the full extent of the data breach and any potential compromise of sensitive information is still under investigation.

Key Takeaways

• Hasbro detected unauthorized access to its network on Saturday, March 28.

• The company has taken swift action, including taking some systems offline, to contain the breach.

• Business operations, including order taking and shipping, are ongoing but may experience delays.

• A full recovery is anticipated to take "several weeks.

• The investigation is underway to determine the scope of the breach and if any data was stolen.

The Cyberattack and Its Immediate Impact

Hasbro, the company behind popular brands like Transformers, Play-Doh, and Nerf, disclosed the cyberattack in a filing with the U.S. Securities and Exchange Commission. Upon discovering the intrusion, the company immediately activated its security incident response protocols. This involved proactively taking certain systems offline to contain the threat and launching a comprehensive investigation with the assistance of third-party cybersecurity experts.

Business Continuity and Potential Delays

Despite the attack, Hasbro has emphasized that its business operations remain open. The company has implemented business continuity plans to ensure it can continue to accept orders, ship products, and conduct other essential operations. However, these interim measures may lead to some delays in product delivery as the situation is resolved. The company has warned that these disruptions could persist for "several weeks."

Investigation into Data Breach

A primary focus of the ongoing investigation is to determine the full scope of the breach, including identifying any files that may have been accessed or stolen by the unauthorized party. Hasbro has stated that it will notify proper authorities and any affected individuals as necessary, based on the findings of the investigation. The specific type of cyberattack, such as ransomware, has not been disclosed.

Broader Implications and Industry Context

Hasbro's incident is the latest in a series of cyberattacks targeting large corporations. Such breaches can have significant financial repercussions and damage brand reputation. Experts advise companies to focus on mitigation and remediation post-breach, including notifying customers and stakeholders, and developing strategies to lessen the impact of future incidents. The company is working diligently to secure its systems and restore full operational capacity.

Sources

• Cyberattack hits Hasbro, impacting orders and shipping, Cybersecurity Dive.

• Hasbro Systems Nerfed by Data Breach; IT Recovery Underway, Bank Info Security.

• Hasbro says it was hacked, and may take 'several weeks' to recover, TechCrunch.

• Toy Giant Hasbro Hit by Cyberattack, SecurityWeek.