Ubisoft is currently under scrutiny due to a suspected breach in its security systems, triggered by the emergence of alleged internal software screenshots online.

In a recent turn of events, Ubisoft, the renowned game publisher, is investigating a suspected infiltration of its digital defenses. This follows the online leak of images that seemingly come from the company’s internal software, potentially marking this as the third significant cyber attack against the publisher in a span of three years. Earlier attacks on Ubisoft have seen cybercriminals leak critical source code and cause disruptions in their online gaming and service platforms in 2022. The latest reports indicate an attempt to acquire confidential data, possibly including details of users from the popular game Rainbow Six Siege. The extent and impact of this suspected breach are currently under Ubisoft’s thorough investigation.

Ubisoft is now meticulously examining the claims of a security compromise after the unexpected leak of its internal software’s screenshots. This incident might be the third major cyber assault on the company since the 2020 security issue. Although the credibility of these claims is still in question, the potential risk could significantly challenge Ubisoft’s security measures in the forthcoming days.

The situation is further complicated by the fact that Ubisoft has been a target for cyber attacks at least twice in recent times. In one notable incident in 2020, a ransomware group named Egregor released a massive 560GB of source code from Ubisoft’s game Watch Dogs Legion. Another breach in 2022 appeared to have impacted several of Ubisoft’s online games and services. Following these incidents, Ubisoft reported that it had resolved the issues and implemented additional security measures. Now, it seems the French gaming giant is facing yet another sophisticated cyber intrusion attempt.

Ubisoft’s Ambitious Battle Royale Ventures Revealed

A report has surfaced suggesting that Ubisoft had been actively developing a dozen battle royale games, aiming to leverage the popularity of this game genre. Security researchers from vx-underground recently shared screenshots on Twitter, claiming to originate from Ubisoft’s internal systems. They allege gaining access to various Ubisoft platforms, including SharePoint server, Microsoft Teams, Confluence, and MongoDB Atlas panel on December 20, 2020. The intruders reportedly maintained access for 48 hours before Ubisoft detected the breach and terminated their access. According to these claims, the hackers attempted to steal up to 900GB of data, which included user information from Rainbow Six Siege, though it appears they were unsuccessful. BleepingComputer has reported that Ubisoft is actively investigating these claims of a security breach.

This revelation comes just two weeks after the massive data breach at Insomniac Games. In that incident, the Rhysida ransomware group leaked approximately 1.67TB of data when the studio allegedly refused a $2 million ransom demand. The leaked information included extensive details about the upcoming Marvel’s Wolverine game and other internal documents, such as development costs and Sony’s plans for future X-Men games. Significantly, this breach also exposed sensitive personal information of Insomniac’s employees.

While the impact of the Ubisoft breach is still being assessed, it is clear that the threat has caused considerable concern within the company. Ubisoft, with several high-profile games in development, including multiple Assassin’s Creed titles and a Massive Entertainment-led open-world Star Wars game, is an attractive target for cybercriminals. These incidents underscore the increasing sophistication and ambition of cyberattacks in the gaming industry. As investigations continue, the full extent of the threat to Ubisoft’s internal data remains to be seen.

Source: GameRant