Gaming Giant Ubisoft Reportedly Thwarts Major Data Breach: 900GB Of User Data Saved

In a recent security breach, gaming giant Ubisoft reportedly deterred hackers’ attempt to siphon off 900GB of data, which included Rainbow Six Siege user data.

What Happened: Ubisoft’s internal services fell victim to a security incursion when hackers managed to penetrate their systems. The breach came to Ubisoft’s notice two days post-incident, which allowed the company to cut off the hackers’ access before they could make off with the data, reported Engadget, citing VX-Underground. 

December 20th an unknown Threat Actor compromised Ubisoft. The individual had access for roughly 48 hours until administration realized something was off and access was revoked.

They aimed to exfiltrate roughly 900gb of data but lost access.

— vx-underground (@vxunderground) December 22, 2023

See Also: Google Chrome Will Now Alert You If Any Of Your Saved Passwords Have Been Compromised

As per the report, the attacker posted screenshots of Ubisoft’s internal tools online, showcasing that they had infiltrated Microsoft Teams conversations, the Ubisoft SharePoint server, Confluence, and MongoDB Atlas. 

However, the threat actor refrained from revealing the initial access method.

In a comment to BleepingComputer, Ubisoft acknowledged the alleged data security incident and affirmed that an investigation is underway, though no further details were offered. “We are aware of an alleged data security incident and are currently investigating. We don’t have more to share at this time.” 

Despite the hackers’ bid to seize Rainbow Six Siege user data, it remains ambiguous whether they managed to procure sensitive information before Ubisoft terminated the operation.

Why It Matters: The incident at Ubisoft indicates the escalating cybersecurity threats plaguing the digital landscape, particularly in the gaming industry. 

According to an Axios report from earlier this year, the frequency and magnitude of data breaches have increased, with 2023 data compromises surpassing those of 2022. 

As hackers become increasingly sophisticated, companies are obligated to bolster their security measures to safeguard sensitive user information and maintain trust.

Photo by Ozrimoz on Shutterstock

Check out more of Benzinga’s Consumer Tech coverage by following this link.

Read Next: Why These CrowdStrike Analysts Believe Company Is Uniquely Positioned In Cybersecurity

This content was partially produced with the help of Benzinga Neuro and was reviewed and published by Benzinga editors.