Ubisoft is investigating a possible cyber attack on its internal servers

Ubisoft has revealed that it's investigating a potential cyber attack on its internal servers, in which around 900GB of data was attempted to be stolen.

24th Dec 2023 10:11

Images via Ubisoft

ubisoft-immortals.jpg

Ubisoft has revealed that it is investigating a cyber attack on its internal servers, in which an invader might have attempted to steal roughly 900GB of company data.

As reported by BleepingComputer, the hack reportedly took place on Wednesday, December 20, when an outside source seemingly accessed the game developers' internal servers. While it seems that no data was stolen, there is evidence that a security breach occurred.

Watch_Dogs IRL

On December 22, the vx-underground account posted on X (formerly Twitter), saying “December 20th an unknown Threat Actor compromised Ubisoft. The individual had access for roughly 48 hours until administration realized something was off and access was revoked.

The user goes on to claim that around 900GB of company data, although this download wasn’t successful before access was revoked. The unknown attacker reportedly attempted to exfiltrate Rainbow Six Siege user data but was also unsuccessful.

In a second post, vx-underground explains that the anonymous supposed hacker wouldn’t share how they gained access to Ubisoft’s servers, but did provide a couple of screenshots to evidence they had indeed gained access.

The screenshots appear to show some of Ubisoft’s internal Microsoft Teams messages, as well as files stored on its SharePoint and Confluence servers. While there are references to games we already know about, there’s nothing new to be gleaned from these leaked screenshots.

In a statement to BleepingComputer, Ubisoft said, “We are aware of an alleged data security incident and are currently investigating. We don't have more to share at this time.

Rough week for video game hacks

This isn’t the first time we’ve reported on a hacking incident in the games industry this week. On Tuesday, December 19, Insomniac Games suffered a monumental cyber attack in which terabytes of stolen internal data were released to the world after being held ransom.

That data included private information about employees, as well as documents that appear to detail the developer’s full slate of game releases up until 2030.

Insomniac Games later released a statement, explaining how it had found the cyber attack ‘extremely distressing’, and that it will share information on its upcoming projects ‘when the time is right’.

Thankfully, it seems that Ubisoft has managed to get away scot-free for the most part on this occasion.

Joshua Boyles

About The Author

Joshua Boyles

Joshua is the Guides Editor at GGRecon. After graduating with a BA (Hons) degree in Broadcast Journalism, he previously wrote for publications such as FragHero and GameByte. You can often find him diving deep into fantasy RPGs such as Skyrim and The Witcher, or tearing it up in Call of Duty and Battlefield. He's also often spotted hiking in the wilderness, usually blasting Arctic Monkeys.

Comments

Replying to:

There are no comments yet for this article...

Be the first to add a comment and take the lead on the conversations

Add Comment

2024 GGRecon. All Rights Reserved