Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Ubisoft Resets Employee Passwords Following Cyberattack

Ubisoft says it has initiated a company-wide password reset operation after learning that it fell victim to a cyberattack.

Ubisoft says it has initiated a company-wide password reset operation after learning that it fell victim to a cyberattack.

In a short cyber incident notification, the French video game company said that the attack – which took place during the week of March 1 – caused some disruptions, but provided no specific details on that.

“Ubisoft experienced a cybersecurity incident that caused temporary disruption to some of our games, systems, and services. Our IT teams are working with leading external experts to investigate the issue,” the company said.

The company also announced that all of its games and services were quickly restored, and that the attack did not result in the personal information of players being compromised.

“As a precautionary measure we initiated a company-wide password reset,” the video game developer said.

While Ubisoft did not share information on the attackers, it appears that the same hacking group that recently claimed responsibility for cyber incidents at NVIDIA, Samsung, and Vodafone might have been involved.

On a Telegram channel supposedly run by the “Lapsus$” extortion group, one of the admins posted a link to a news article on the Ubisoft attack, followed by the smirking face emoji, which may suggest the group is taking responsibility for the breach. 

Ubisoft hacked

In the case of NVIDIA, Samsung and Vodafone, the hackers claimed to have stolen large amounts of source code.

Advertisement. Scroll to continue reading.

This is the second cyber incident that Ubisoft discloses over the course of three months. In December 2021, the company announced that ‘Just Dance’ user data was compromised due to a misconfiguration in the company’s IT infrastructure.

Related: Credentials of 71,000 NVIDIA Employees Leaked Following Cyberattack

Related: Ubisoft Confirms Unauthorized Access to ‘Just Dance’ User Data

Related: Business Services Firm Morley Discloses Data Breach Affecting 500,000 People

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders.

Register

People on the Move

Former federal CISO Chris DeRusha has been appointed Director of Global Public Sector Compliance at Google Cloud.

Cybersecurity veteran Kevin Mandia has been named General Partner of Ballistic Ventures.

Michael Williams has been named the new Chief Marketing Officer of Zimperium.

More People On The Move

Expert Insights