Ubisoft security breached, over 900GB stolen

John Elden Ring

The Thread Maker
Content Creator
5 Jul 2022
5,623
6,558
United States
90021_432_ubisoft-may-sell-game-franchises-to-reduce-costs.png

We are aware of an alleged data security incident and are currently investigating. We don't have more to share at this time," Ubisoft said in a statement to BleepingComputer.

In a tweet, vx-underground says that an unknown threat actor told them that they breached Ubisoft on December 20th. Once inside the company’s systems, they said they planned to exfiltrate around 900GB of data.


vx-tweet.jpg

Source
 

Gediminas

Boy...
Founder
21 Jun 2022
6,183
7,863
90021_432_ubisoft-may-sell-game-franchises-to-reduce-costs.png



In a tweet, vx-underground says that an unknown threat actor told them that they breached Ubisoft on December 20th. Once inside the company’s systems, they said they planned to exfiltrate around 900GB of data.


vx-tweet.jpg

Source
Let's see what spicy stuff will come up.
How many harassments cases they buried etc..
 

Snes nes

Banned
4 Aug 2023
735
580
Wow I can’t wait for the assassins creed spoilers! That one point where that one guy did that one thing was suspenseful.
 
Last edited:
  • haha
Reactions: Diah

ethomaz

Rebolation!
21 Jun 2022
9,604
7,976
Brasil 🇧🇷
PSN ID
ethomaz
Publishers are stupid?

They saw others and did nothing to secure their own data.
That is amateurism.

Put 2 factor authentications.

Control who access your files.
If you see any weird access (AI exist for that… for example a access from a user in a different time he use to access) send a message to check and see if it an authorized access.

Have a easy go offline option… if any suspicious access is happening turn everything offline until you check and deal with it.

There is no way a hacker will download 1TB of data without you get alerts from suspicious actions if you implemented proper IT security.

Plus 2 factor authentication via phone app requires the hacker to access your phone that is another level of difficult to the hacker.
 
Last edited:

ethomaz

Rebolation!
21 Jun 2022
9,604
7,976
Brasil 🇧🇷
PSN ID
ethomaz
These hackers are out of control, they are just rampant.

Amazing how Microsoft escapes all the time though.
We can hate Microsoft in gaming.

But they do implement proper security in their products… the could Azure and Office tools have several layers of security… their MFA (multi authentications is probably the best one in the market), you can configure access by role or file by file… yeap you can configure individual access (only that person can access that single file).

You can configure private VPN or only allow access thought your own company network… it continue on the Cloud but any place outside your network will not even show your domain (Error 404).
 

ethomaz

Rebolation!
21 Jun 2022
9,604
7,976
Brasil 🇧🇷
PSN ID
ethomaz
Iirc 2 factor authentication creates some sort of security problem.
Care to explain.
I work in a company that strong support MFA to all ours clients.

Maybe bad configured MFA is open to security problems.

You probably are talking about SMS or voice-based MFA that nobody uses nowdays… for example Push MPA notifications doesn’t have the security issues or SMS or voice-based.
Push notification with number matching goes a level higher in security.
 
Last edited:
  • Like
Reactions: Snes nes

flaccidsnake

Veteran
2 May 2023
2,997
2,525
These hackers are out of control, they are just rampant.

Amazing how Microsoft escapes all the time though.

MS suffered by far the worst leaks of all this year. Also they're hacked constantly:
 

ethomaz

Rebolation!
21 Jun 2022
9,604
7,976
Brasil 🇧🇷
PSN ID
ethomaz
MS suffered by far the worst leaks of all this year. Also they're hacked constantly:
They got access to an account with unlimited access… another big L to Microsoft.

That come to the point why an account have unlimited access? An account should have access only to what it needs… never the full access.
 
  • they're_right_you_know
Reactions: flaccidsnake