Inside This Article:
- Hasbro recently detected a cyber incident that involved unauthorized access to its network.
- The toy company said containment measures could impact operations for weeks and potentially cause delays in order fulfillment as the investigation continues.
- Cyberattacks can create immediate operational and financial strain for companies, even before the full scope of a breach is known.
- Cyber & Privacy Liability Insurance can help cover the cost of breach response, business interruption, reputational damage, and more following an attack.
For Hasbro, the name behind Monopoly and Peppa Pig, a recent cyberattack is turning game money into real-world risk after unauthorized access to its network prompted the company to take systems offline. The breach, discovered March 28, could delay shipments of its beloved brands as the investigation continues, according to a recent SEC filing and BBC News.
Hasbro said contingency measures could remain in place for “several weeks” as the investigation continues with the assistance of third-party cybersecurity professionals, the SEC filing noted. As of the latest reporting, it remained unclear whether sensitive data was accessed or who may be responsible.
“It takes time to get experts into your network and really understand the extent of a breach. It could be really bad, or it could be less serious,” said Abe Gibson, Broker, Burns & Wilcox, Brokerage Division, Atlanta, Georgia. “Nobody would think Hasbro, known for toys and things like that, would be a target. It is a good example of how these cyberattackers are just opportunists and when they find an opportunity, they exploit it.”
Nobody would think Hasbro, known for toys and things like that, would be a target. It is a good example of how these cyberattackers are just opportunists and when they find an opportunity, they exploit it.
Even with strong cybersecurity controls, incidents like this are difficult to prevent and can be extremely costly. Cyber & Privacy Liability Insurance can help cover many of the costs associated with these attacks, said Gage Maddox, Broker, Professional Liability, Burns & Wilcox, Salt Lake City, Utah.
“There is no way to 100% stop cyberattacks from happening. You can have the best cybersecurity in the world, but the reality is all it takes is one individual clicking the wrong link for a hacker to get in and cause a lot of damage,” Maddox said. “It is crucial for a business to have insurance as that backstop just in case something like this happens.”
It is crucial for a business to have insurance as that backstop just in case something like this happens.
Uncertainty follows initial breach disclosure
In the days following a cyber incident, companies must determine how attackers gained access, whether those bad actors still have a foothold in the network, and what data may have been affected — a costly process that typically requires coordination across multiple outside experts, including forensic investigators, attorneys, and crisis communications teams. If personal data was accessed, companies may also face notification requirements and the cost of credit monitoring for affected individuals, Gibson said. These expenses can typically be covered by a Cyber & Privacy Liability Insurance policy.
“First and foremost is incident response,” he said. “You are going to have forensic investigators come in and figure out where the breach occurred, how they got in, and ensure they cannot get back in.”
The timeline for this work can be lengthy. According to IBM’s 2025 Cost of a Data Breach Report, it takes an average of 241 days to identify and contain a breach, Infosecurity Magazine reported.
“It can definitely take some time,” Maddox said. “With this [Hasbro] incident, it looks like no one has claimed responsibility yet, and it is not known whether the hackers are out of their system or not. That is a scary thought.”
Operational disruption drives losses
Business interruption is often one of the most significant consequences of a cyber event, particularly when a company’s systems must be taken offline to contain a threat. In March, a cyberattack against medical device manufacturer Stryker disrupted its ability to process orders and ship products, which led to delayed surgical procedures for some patients, HIPAA Journal reported.
Those disruptions often translate into financial losses, Gibson said. “If they are not able to operate at 100% because their systems are down, Business Interruption Coverage can cover the net income you are losing out on because of the attack,” he said.
If they are not able to operate at 100% because their systems are down, Business Interruption Coverage can cover the net income you are losing out on because of the attack.
This is “one of the most important” components of a Cyber & Privacy Liability Insurance policy, Maddox added. “A company like Hasbro is likely going to lose out on revenue due to this cyberattack and having to operate differently,” he said. “That lost revenue is something your Cyber Insurance policy may be able to cover.”
The same IBM report also estimated that the average cost of a breach was $4.44 million globally and $10.22 million in the U.S. in 2025. Other costs that may be covered by Cyber & Privacy Liability Insurance include overtime labor and outside vendors brought in to help rebuild infrastructure, Gibson said. “Then, there is also the legal liability if there are any lawsuits from customers or partners that arise from the breach,” he said.
Reputational damage is another potential loss that is often overlooked and can be covered by a Cyber policy, Maddox said.
“When a company is hacked and their data is breached, customers and shareholders may start to question the security of that company,” he said. “Cyber risk really is one of the biggest, if not the biggest risk, that business owners face nowadays. We all know someone who has been a victim. It could be any of us.”
Coverage gaps and evolving cyber risks
As cyber threats evolve, new risks are emerging beyond data breaches, including artificial intelligence-driven attacks and expanding privacy regulations. Tools powered by AI may make it easier to generate phishing emails and conduct large-scale attacks, while regulatory requirements are creating new areas of exposure for businesses.
“AI is at the forefront of conversations in the cyber space right now,” Maddox said. “It is important to review your policy to see what it specifically says in regards to AI.”
Privacy-related risks are also increasing as companies face stricter regulations tied to how data is collected and used online. “That is a growing challenge,” Gibson said. “You put your website online and you have to be compliant [with privacy regulations] or you have an exposure.”
Coverage for these risks can vary. Unlike more standardized types of insurance, Cyber & Privacy Liability Insurance policies can differ significantly between carriers. “It is kind of the Wild West right now. What somebody calls a Cyber policy at one carrier can look completely different from what it looks like at another carrier,” Gibson said.
Responding to a cyberattack requires substantial time and resources, especially for smaller organizations without dedicated technical teams.
“Hackers do not discriminate. They will target anyone with vulnerabilities,” Maddox said. “Security and insurance really do go hand-in-hand. You can have locks on your doors but you still need to have insurance just in case something happens. It is very much the same in the cyber world.”
Hackers do not discriminate. They will target anyone with vulnerabilities.
