Ubisoft investigates a data breach attack on its systems

One of the most renowned video game-developing companies, Ubisoft, is currently facing backlash in the gaming community as it investigates another possible data breach attack.

The incident raised concerns among the gaming community and industry insiders, as the breach could significantly disrupt the environment. Researchers who discovered the attack sounded the alarm last December 20, 2023.

Ubisoft, a multinational powerhouse in the gaming industry, is famous for developing, publishing, and distributing widely played franchises, such as Assassin’s Creed, Tom Clancy’s Rainbow Six Siege, Far Cry, and Watch Dogs, across various platforms. However, the recent incident has shown how attackers exploit the vulnerability in its infrastructure.

 

The Ubisoft attacker allegedly stayed within its infrastructure for about two days.

 

According to investigations, an unknown, unauthorised individual breached Ubisoft’s systems. Moreover, the attacker maintained access for approximately 48 hours before admins detected and locked it out of their infrastructure.

While the exact breach method remains unclear, the hackers reportedly tried to steal user data from the popular game R6 Siege.

The threat actor claimed that it accessed the company’s Microsoft Teams, Confluence, and SharePoint installs and asserted intentions to exfiltrate a staggering 900GB of data stolen from Ubisoft. This revelation has concerned the gaming community since it could result in the potential compromise of sensitive information.

This incident is not the first time Ubisoft has experienced cyber threats. In March 2022, the company faced a severe cyberattack that significantly impacted games, systems, and services. The Lapsus$ extortion gang claimed responsibility for the incident and boasted about breaching the company network and successfully stealing internal data.

To add to the company’s cybersecurity mishaps, in October 2020, the Egregor ransomware group targeted the game developer dubbed Crytek and leaked files allegedly stolen from Ubisoft. These incidents show the persistent challenges major players experience in the gaming world since they increasingly deal with sophisticated cyber threats annually.

Ubisoft is investigating the latest breach and trying to fortify its cybersecurity measures. However, the details of the cyberattack are still insufficient; hence, the gaming community will have to wait for updates on the extent of the compromise and its potential implications for every relevant party.