Hasbro Hacked, Investigates “Unauthorized Access” to Systems

In a regulatory filing on April 1, 2026, toy and gaming giant Hasbro—the parent company of Wizards of the Coast—disclosed that it is currently investigating a significant cybersecurity incident.

According to the filing, the breach was first detected on March 28, 2026, when the company identified unauthorized access to its internal network. In response, Hasbro immediately activated its security incident response protocols and enlisted the help of an expert third-party cybersecurity firm to lead the investigation.

Precautionary Measures & Current Status

As a safeguard, Hasbro has taken several of its systems offline while the investigation continues. Despite these technical hurdles, the company has emphasized that it is maintaining its core business operations.

What this means for fans and customers:

• Orders & Shipping: Hasbro is still taking online orders and shipping products.

• Key Operations: General business functions remain active.

• Ongoing Security: The company is continuing to implement additional measures to secure its environment and prevent further intrusion.

Impact on Wizards of the Coast

At this stage, it remains unclear whether this incident will directly impact operations at Wizards of the Coast. While Hasbro’s corporate systems are undergoing a security sweep, the specific digital infrastructure used for D&D Beyond, Magic: The Gathering Arena, or the upcoming D&D 5.5e digital releases has not been explicitly cited as part of the offline systems.

However, in an era where digital tools are the lifeblood of the hobby, any disruption at the parent company level is worth watching closely.

Rebuilding Digital Trust

This incident comes at a sensitive time for the brand, as WotC is currently pushing for a more integrated digital “lifestyle” experience for its players. Transparency will be key as the investigation unfolds. We will continue to monitor the situation and provide updates as soon as more information regarding the scope of the breach—and any potential impact on player data—becomes available.