Toy and game giant Hasbro on Wednesday reported being hit by a cyberattack that has disrupted some of the company’s processes.
In a filing with the SEC, the company said it detected unauthorized access to its network on March 28. Some systems have been taken offline as part of incident response measures.
An investigation is being conducted with the aid of outside cybersecurity experts. One of the goals of the investigation is to determine the full scope of impact, including whether any files have been compromised.
“The Company has implemented and continues to implement business continuity plans to enable it to continue to take orders, ship product and conduct other key operations while it resolves this situation,” Hasbro said.
“The need to run these interim measures may continue for several weeks before the situation is fully resolved and may result in some delays,” it added.
Based on its brief description of the security incident, Hasbro may have been targeted by a cybercrime group in an attack that involved the deployment of file-encrypting ransomware and data theft.
No known extortion group has taken credit for an attack on Hasbro. However, the breach was only discovered a few days ago, and it typically takes longer for cybercrime gangs to list victims on their leak websites — usually when negotiations fail or stall.
Hasbro says it’s working on securing its systems and will take other actions, including notifications, based on the results of its investigation.
Related: Lloyds Data Security Incident Impacts 450,000 Individuals
Related: Healthcare IT Platform CareCloud Probing Potential Data Breach
Related: European Commission Reports Cyber Intrusion and Data Theft
