Security Experts:

Connect with us

Hi, what are you looking for?



Toy Manufacturer Mattel Discloses Ransomware Attack

American toy manufacturing giant Mattel this week revealed that it fell victim to a ransomware attack that impacted some of its operations.

American toy manufacturing giant Mattel this week revealed that it fell victim to a ransomware attack that impacted some of its operations.

Founded in 1945 and headquartered in El Segundo, California, Mattel is one of the largest toy sellers in terms of revenue, with its operations divided into three segments, namely North America, International, and American Girl.

Mattel sells products such as Barbie, Fisher-Price, Monster High, American Girl, Polly Pocket, and Hot Wheels in 150 countries, and has a presence in 40 countries.

In a 10-Q form filed with the Securities and Exchange Commission (SEC) this week, the toy maker revealed that, earlier this year, it fell victim to a ransomware attack.

“On July 28, 2020, Mattel discovered that it was the victim of a ransomware attack on its information technology systems that caused data on a number of systems to be encrypted,” the company said in the SEC filing.

Mattel also noted that, immediately after identifying the incident, it activated response protocols and took measures to contain the attack and restore impacted systems.

“Mattel contained the attack and, although some business functions were temporarily impacted, Mattel restored its operations,” the company said.

Following an investigation into the incident, the company concluded that no sensitive business data was exfiltrated. Furthermore, the company says that no retail customer, consumer, supplier, or employee data was stolen either.

“There has been no material impact to Mattel’s operations or financial condition as a result of the incident,” the company said.

Mattel did not provide information on the ransomware family involved in the incident, but the Ryuk operators might have been involved, following a TrickBot infection.

SecurityWeek has contacted Mattel for additional details on the incident and will update the article as soon as a reply arrives.

Related: Law Firm Seyfarth Shaw Hit by Damaging Ransomware Attack

Related: Government Software Provider Tyler Technologies Confirms Ransomware Attack

Related: University Project Tracks Ransomware Attacks on Critical Infrastructure

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Expert Insights

Related Content


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.


The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.


The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Management & Strategy

Industry professionals comment on the recent disruption of the Hive ransomware operation and its hacking by law enforcement.

Malware & Threats

Microsoft plans to improve the protection of Office users by blocking XLL add-ins from the internet.


A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...


US government reminds the public that a reward of up to $10 million is offered for information on cybercriminals, including members of the Hive...


The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.