Ubisoft is currently investigating a potential security breach following the online leakage of images depicting the company’s internal software and developer tools.
BleepingComputer reports that Ubisoft informed them about an ongoing investigation of a suspected data security incident, prompted by the release of screenshots by the security research collective VX-Underground. The screenshots suggest exposure of the company’s internal services.
“We are aware of an alleged data security incident and are currently investigating. We don’t have more to share at this time,” Ubisoft said.
In a tweet, vx-underground disclosed that an unidentified threat actor claimed responsibility for breaching Ubisoft on 20 December, intending to exfiltrate approximately 900GB of data once infiltrating the company’s systems.
The threat actor asserted access to Ubisoft’s SharePoint server, Microsoft Teams, Confluence, and MongoDB Atlas panel, substantiating their claims with screenshots showcasing their entry into some of these services.
Furthermore, the threat actors conveyed to vx-underground that they had tried to steal Rainbow 6 Siege user data but were thwarted, losing access before succeeding in their data extraction attempt.
A similar incident also happened to another video game company, Insomniac Games. But they weren’t so lucky, as the hacker managed to steal their data and leak a bunch of information regarding upcoming games.
