Ubisoft Avoided A Possible 900GB Data Breach By Quickly Revoking Hackers' Access

22/12/2023

Anything that is connected to the internet, can be hacked.

On the internet, where devices are all connected in a vast network of networks, it's a continuous war between cybersecurity experts and hackers, who both fight in the field where no eyes can see.

Just days after Insomniac Games revealed that it suffered a devastating data breach, Ubisoft was said to almost suffered the same fate.

Security collective VX-Underground shared a report on X, saying that an "unknown Threat Actor" got access to Ubisoft's internal tools, including access to SharePoint, Confluence, and Microsoft Teams, as well as other, internal systems, and shared screenshots online.

But despite that high-level access, it seems that they reveal almost nothing.

The Threat Actor would not share how they got initial access. Upon entry they audited the users access rights and spent time thoroughly reviewing Microsoft Teams, Confluence, and SharePoint.

They attempted to exfiltrate R6 Siege user data but were unsuccessful pic.twitter.com/EPRraDl3MT
— vx-underground (@vxunderground) December 22, 2023

Allegedly, they intended to steal 900GB worth of data from the French game publisher behind famous titles like Assassin's Creed, Prince of Persia, Far Cry and more. But according to VX-Underground, Ubisoft managed to thwart the attack.

It's said that the hackers wanted to get Rainbow Six: Siege user data.

The online tactical shooter video game developed by Ubisoft Montreal and published by Ubisoft, was released worldwide for PlayStation 4, Windows, and Xbox One on December 1, 2015; the game was also released for PlayStation 5 and Xbox Series X/S exactly five years later on December 1, 2020.

Fortunately for Ubisoft, its team was quick in its response.

Upon realizing the breach, the company moved swiftly to then revoke the hackers' access to its system within 48 hours.

Because of this, the company successfully prevented serious damage from being done.

Ubisoft's headquarters in a building called Floresco, situated in the Paris suburb of Saint-Mandé. Located near the Bois de Vincennes.

Ubisoft's headquarters in a building called Floresco, situated in Saint-Mandé. Located near the Bois de Vincennes, which is Paris' largest public park, the building boasts three ochre glass-and-metal wings that extend onto a stone plaza and feature rooftop terraces.

Ubisoft Entertainment SA is a French video game publisher headquartered in Saint-Mandé with development studios across the world.

Founded by five brothers in 1986, its long list of popular video game franchises make it one of the most successful gaming companies in the world.

Ubisoft, which confirmed the breach, said that it is "aware of an alleged data security incident" and that it is investigating the matter.