Ubisoft Cuts Off Hacking Attempt, Now Investigating

Once again, a video game company finds itself the target of an attempted breach. We say "attempted" this time, because – for once – the attempt was thwarted. Last Thursday, hackers attempted to breach the Ubisoft servers and take 900 gigabytes of data. What that data consisted of hasn’t been revealed – and may not be as the security team caught the attempt in action and put a halt to it.

That said, according to Twitter user vx-underground, the hacker(s) had access to the Ubisoft servers for approximately 48 hours. At that time, Ubisoft’s team noticed something wasn’t right and revoked access.

The Threat Actor would not share how they got initial access. Upon entry they audited the users access rights and spent time thoroughly reviewing Microsoft Teams, Confluence, and SharePoint.

They attempted to exfiltrate R6 Siege user data but were unsuccessful pic.twitter.com/EPRraDl3MT

— vx-underground (@vxunderground) December 22, 2023

As of today, Ubisoft has noted that they are “aware of an alleged data security incident and are currently investigating”, according to a statement to AFP and shared on Barrons. This doesn’t mean that the actors in question won’t make another attempt.