The toy maker said it took some systems offline after finding unauthorized network access and warned interim workarounds could slow orders and shipments for several weeks.
City officials said a March 14 attack hit a water treatment plant server, but the water supply stayed safe while staff ran manual procedures for about 16 hours.
Bellflower Unified said phone and network disruptions began in early August, followed by a months-long forensic review and a later, unconfirmed Rhysida claim.
Officials say a hacked town email prompted the state to cut some system connections, interrupting clerk, dispatch, DMV and records-related access while a forensic review continued.
An SEC filing says an unauthorized third party disrupted access for about eight hours, and the company is still assessing whether patient information was accessed or exfiltrated.
The attack knocked out the office’s network, moved dispatch work to Seymour police and left officers filing reports in Word documents, according to Lt. Adam Nicholson.
The nonprofit said stores remain open, but point-of-sale disruptions have forced cash-only purchases as an Interlock post appeared to identify the West Michigan affiliate.
The behavioral health provider said connectivity and some business operations were disrupted as investigators reviewed the scope of the incident and a Qilin leak-site claim.