Ubisoft is grappling with the fallout from a new security breach. This is the latest hacking incident following the massive Insomniac Games hack from earlier this month, raising concerns about the safety of internal data and potential impacts on upcoming video game releases.
According to the French video game publisher, an unknown culprit claims to have breached its systems on December 20 with plans to exfiltrate about 900GB of data. The hackers reportedly gained access to the company's SharePoint server, Microsoft Teams, Confluence, and MongoDB Atlas panel. Screenshots shared online provided proof of this unauthorized access. Ubisoft confirmed awareness of the alleged data security incident and is currently investigating the matter.
The depth and breadth of the breach remain unclear. While the threat actor boasted of attempting to steal Rainbow 6 Siege user data, they reportedly lost access before they could achieve their goal. This claim, however, has not been fully substantiated, leaving ambiguity about whether any data was successfully extracted.
Ubisoft's struggles with cybersecurity aren't new. In 2020, the company found itself targeted by a ransomware gang, which led to the release of part of the source code for Ubisoft's Watch Dogs game. Another breach occurred last year, disrupting games, systems, and services. This latest breach is the third significant cybersecurity incident the company has faced since 2020.
