Ubisoft reportedly shut down a "data security incident" earlier this week
Dec-27-2023
Ubisoft, the renowned game developer, is currently probing a significant cybersecurity issue following claims that a malicious entity managed to infiltrate important internal communication platforms. Reports suggest that during an incident on December 20th, an unidentified entity accessed Ubisoft's Microsoft Teams, Confluence, Atlas, and SharePoint for an approximate two-day period before administrators detected the abnormality and cut off this access.
Online discussions on platforms such as the Gaming Leaks and Rumours subreddit and details from Bleeping Computer indicate that snapshots purportedly captured during the infiltration circulated on the internet. These images point to the gravity of the access breach at Ubisoft.
The information published by vx-underground on Twitter illustrates that the infiltrator scrutinized user privileges while taking time to meticulously survey Microsoft Teams, Confluence, and SharePoint. According to their account, the intruder's goal was to smuggle out an estimated 900GB of data, although it remains unconfirmed whether any data was obtained before their connection to the systems was terminated. The hacker refrained from revealing the method they used to gain the initial entry. Notably, they did not manage to obtain Rainbow Six Siege user data before their expulsion.
Ubisoft has officially acknowledged the situation, stating to BleepingComputer that they are actively investigating what they refer to as an "alleged data security incident" but have not provided additional information at this point.
Meanwhile, Insomniac Games, the creator of Marvel's Spider-Man, has broken its silence regarding the ransomware attack it faced earlier in the month and the release and distribution of stolen data, which includes details on future gaming projects. Insomniac, which had been focusing its efforts internally to ensure the well-being of its team members, confirmed that personal data was part of the breach. The studio is vigorously assessing the extent of the impact.
As for the leaked materials related to Marvel's Wolverine and other potential game releases, the PlayStation-affiliated studio has expressed its intention to disclose information about these projects when it deems it appropriate. The studio is taking a cautious approach to managing the dissemination of information concerning its anticipated projects.