Ubisoft probing indicates a possible Data Security Incident
- Leaked screenshots allegedly show access to Ubisoft's internal software like SharePoint, Microsoft Teams, and Confluence.
- The attacker reportedly had access for 48 hours before Ubisoft detected and revoked it.
- Claims suggest an attempt to steal 900GB of data, including Rainbow Six Siege user information, but it was unsuccessful.
Ubisoft is currently investigating claims of a security breach following leaked screenshots of the publisher's internal software and tools. This incident could mark the third notable attempt at compromising Ubisoft within three years, raising concerns about the company's cybersecurity practices.
Ubisoft has faced several security breaches in recent years, including a 2020 ransomware attack that leaked 560GB of source code for Watch Dogs Legion and a 2022 incident that disrupted online games and services. The latest claims, tweeted by security research collective vx-underground, allege unauthorized access to Ubisoft's internal servers on December 20. The attacker reportedly gained entry through the company's SharePoint server and accessed Microsoft Teams, Confluence, and MongoDB Atlas panel. While Ubisoft managed to regain control within 48 hours, concerns remain about the potential data exposure.
Further Investigation Needed:
BleepingComputer reports that Ubisoft is aware of the claims and is investigating the matter. The extent of the potential data breach and the attacker's motives are still unclear. It is also important to note that the veracity of the leaked screenshots has not been independently verified.
Cybersecurity Concerns:
The Insomniac Games data breach that took place only recently, in which hackers released 1.67 TB of documents including employee information and internal files is still fresh in everyone's minds. These attacks show an increased threat of cybercrime against video game companies, especially those with sensitive intellectual property and user information. Ubisoft is currently working on big-name games including several installments in the Assassin's Creed series and an open-world Star Wars game. These valuable assets make the company all too vulnerable to cybercriminals, and only time will tell whether this latest incident will have anything of an effect on its future* projects.