Ubisoft’s inside companies had been compromised in a safety breach this week when hackers tried to steal 900GB of knowledge, together with Rainbow Six Siege consumer knowledge, in keeping with VX-Underground. Ubisoft noticed the breach 48 hours later, and was in a position to revoke the hackers’ entry earlier than they may efficiently exfiltrate the info.
In an announcement to BleepingComputer, Ubisoft stated, “We’re conscious of an alleged knowledge safety incident and are at present investigating. We do not have extra to share right now.” VX-Underground posted redacted screenshots shared by the attacker that allegedly present they accessed Microsoft Groups conversations, the Ubisoft SharePoint server, Confluence and MongoDB Atlas. “The Menace Actor wouldn’t share how they received preliminary entry,” VX-Underground wrote in a publish on X. “Upon entry they audited the customers entry rights and hung out completely reviewing Microsoft Groups, Confluence, and SharePoint.”
December twentieth an unknown Menace Actor compromised Ubisoft. The person had entry for roughly 48 hours till administration realized one thing was off and entry was revoked.
They aimed to exfiltrate roughly 900gb of knowledge however misplaced entry.
— vx-underground (@vxunderground) December 22, 2023
Based on VX-Underground, the attackers’ try and get Rainbow Six Siege consumer knowledge was unsuccessful. It’s unclear right now in the event that they had been in a position to get any delicate info earlier than Ubisoft shut the entire thing down.
This text initially appeared on Engadget at https://www.engadget.com/ubisoft-reportedly-stopped-hackers-from-stealing-900gb-of-data-in-a-breach-this-week-162438766.html?src=rss
Trending Merchandise