Ubisoft hack: Video game company Ubisoft recently confirmed that it suffered a “cybersecurity incident” that caused an outage to its games, systems, and services. The company’s announcement came after many users reported problems. Ten days ago, users began reporting problems accessing the Ubisoft service.
The LAPSUS$ extortion group , which had also claimed responsibility for the breaches of Samsung , NVIDIA , and Mercado Libre , appears to be behind the incident
See also: NetWalker ransomware associate extradited to US to face further charges
Ubisoft has proceeded to "reset passwords across the company"
In a statement about the cybersecurity incident on March 10, Ubisoft stated the following:
“Last week, Ubisoft experienced a cybersecurity incident that caused a temporary outage to some of our games, systems, and services. Our IT teams are working with leading experts to investigate the issue. As a precautionary measure, we have initiated a company-wide password reset.“.
The video game company has created some of the most successful titles, including Assassin's Creed, Far Cry, For Honor, Just Dance, Prince of Persia, Rabbids, Rayman, Tom Clancy's and Watch Dogs.
The problems appear to have started on March 4th, when users began reporting on Twitter and Downdetector that they were having problems accessing some of Ubisoft's services. The access issues were linked to the cybersecurity incident.
See also: 2021: We had a record number of Chrome zero-days exploited by hackers
Ubisoft also said: "At this time, there is no evidence to suggest that any personal information of gamers was exposed during the incident."
The company confirms that all games and services are now operating normally.
The news of Ubisoft's confirmation of the security incident was first reported by The Verge.
Moments later, administrators of Lapsus$' Telegram group responded to The Verge's initial report with a "sly smile emoji," implying that the group was behind the hack.
As we mentioned above, Lapsus$ has been linked to the breach and data leak of major companies, such as Samsung, NVIDIA , and Mercado Libre.
Extortion groups like Lapsus$ compromise victims' systems, but they don't encrypt systems and files like ransomware. Instead, they steal and preserve victims' data, publishing it if their blackmail demands aren't met.
See also: REvil ransomware member extradited to US to stand trial for Kaseya attack
At this time, we do not know if and what Ubisoft data the criminals were able to steal during the hack. The investigation is ongoing.
Source: Bleeping Computer
