Hasbro takes systems offline after cyberattack, warns of weeks of disruption
Hasbro, the maker of Monopoly, Transformers and Dungeons and Dragons, confirmed in a filing with the U.S. Securities and Exchange Commission that it detected an intrusion into its network on March 28 and took some systems offline in response.
The company warned customers and investors to expect delays, saying interim measures would need to run for several weeks before the situation was fully resolved, TechCrunch reported on April 1.
What happened
Parts of Hasbro's website showed a maintenance message. The company said it had brought in outside cybersecurity specialists and was using business continuity plans to keep taking orders and shipping products. Its filing said it was still putting measures in place to secure operations.
A spokesperson, Andrea Snyder, said the company had taken swift action to protect its systems and data. Hasbro did not say what kind of attack it was, whether data was stolen or whether it had received a ransom demand. No group publicly claimed the attack.
Later disclosures
Update: In late August, Hasbro began notifying people that their personal information had been exposed in a security incident identified earlier in the year, SecurityWeek reported. A filing with the Massachusetts attorney general listed 436 residents of that state. The data varied by person and included names, email and postal addresses, phone numbers, national ID numbers and financial information. Hasbro offered identity protection services. It has not confirmed whether the notices relate to the March attack, which SecurityWeek said cost $11 million (U.S.) in cleanup and delayed $25 million in product sales.
What we don't know yet
Hasbro has not identified the attackers, explained how they got in or said how many people in total received notices. Hasbro has about 4,600 employees worldwide.
What to do
Anyone who receives a Hasbro notice should enrol in the identity protection offered, watch bank and card statements, and be wary of emails or calls that use the breach as a pretext. Retail partners should confirm any change to Hasbro payment or ordering details by phone through a known contact.
