“`
Ubisoft Investigating Data Security Breach
Ubisoft is reportedly investigating an “unknown threat actor” who allegedly gained unauthorized access to the company’s internal systems. The breach, which occurred on December 20th, resulted in the unauthorized access of several platforms including Microsoft Teams, Confluence, Atlas, and SharePoint. Screenshots allegedly taken during the hack have since been leaked online, prompting Ubisoft to confirm that they are investigating the “alleged data security incident”.
The hacker, known as “vx-underground” on Twitter, claimed that they had access to Ubisoft’s internal systems for approximately 48 hours before the breach was discovered and access was revoked. The hacker attempted to exfiltrate roughly 900GB of data but reportedly lost access before they were able to do so. The extent of the data that may have been compromised remains unclear at this time.
Following the breach, the hacker audited user access rights and spent time reviewing various platforms within Ubisoft’s internal systems. While the threat actor’s actions did not result in the successful exfiltration of user data from games such as Rainbow Six Siege, the incident has raised concerns about data security within the company.
In response to the breach, Ubisoft released a statement to BleepingComputer acknowledging the incident and confirming that they are currently investigating the matter. The company has not provided further details regarding the scope of the breach or the potential impact on its users and customers.
Insomniac Games Responds to Ransomware Attack
Marvel’s Spider-Man developer Insomniac Games has also been the target of a recent ransomware attack, resulting in the release of stolen data and information related to upcoming projects. While the studio initially refrained from making a public statement, it has now addressed the attack and the impact it has had on its operations.
Insomniac Games confirmed that personal data was included in the breach and that they are actively assessing the extent of the damage. In addition, the studio acknowledged the unauthorized release of information pertaining to upcoming game projects, such as Marvel’s Wolverine, and stated that they will share more details “when the time is right”.
“`