Quick answer: In late March 2026, toymaker Hasbro discovered hackers inside its systems. Its website was unavailable for weeks, the disruption forced the company to delay a quarterly filing with the US Securities and Exchange Commission, and personal information of a few hundred employees was affected. In May 2026, Hasbro said the hackers were no longer in its systems and recovery was underway.
| Key facts | |
|---|---|
| Date | Discovered late March 2026; all-clear announced May 2026 |
| Organization | Hasbro (toys and games, United States) |
| Type of attack | Intrusion causing a long outage |
| Attacker | Not publicly named |
| Impact | Website down for weeks; delayed SEC quarterly filing; a few hundred employees’ data affected |
| Ransom | Not disclosed |
Timeline
- Late March 2026: Hasbro discovers hackers in its systems.
- April 2026: Systems and the website remain largely offline; Hasbro files a notice delaying its quarterly report.
- May 2026: Hasbro says the hackers are no longer in its systems and recovery is underway.
What happened
Hasbro, the company behind brands such as Monopoly and Transformers, found hackers in its network in late March 2026. In the weeks that followed, the company was still largely offline and its website was unavailable.
The disruption was serious enough that Hasbro could not file its quarterly report with the SEC on time. In May it said the attackers were gone. It also disclosed that personal information of a few hundred employees was affected. Hasbro did not say whether it paid the hackers.
Why it matters
Public companies must report material cyber incidents and file financial reports on time. When finance systems are down, reporting deadlines become a second crisis. The Hasbro case shows that recovery planning must cover finance and compliance processes, not only websites and email.
Lessons for your organization
- Include finance and regulatory reporting systems in recovery plans and tests.
- Know your disclosure obligations, such as SEC rules for material cyber incidents.
- Keep offline copies of the information needed to run finance during an outage.
- Rehearse the first 72 hours of a major incident with leadership.
- Communicate with employees promptly when their data is affected.
This incident is part of our guide to major cyber attacks and data breaches, which compares the biggest incidents and the patterns behind them. Read our guide to incident response strategies. To see whether the same weaknesses exist in your organization, take the free Cybersecurity Readiness Assessment.
Frequently asked questions
What happened to Hasbro in 2026?
Hackers were found in Hasbro’s systems in late March 2026, leaving the company largely offline for weeks and delaying its SEC quarterly filing.
Was customer data stolen in the Hasbro attack?
Hasbro disclosed that personal information of a few hundred employees was affected.
Did Hasbro pay a ransom?
Hasbro has not said whether it paid the hackers.
