Ubisoft reportedly stopped hackers from stealing 900GB of data in a breach this week

Ubisoft’s internal services were compromised in a security breach this week when hackers attempted to steal 900GB of data, including Rainbow Six Siege user data, according to VX-Underground. Ubisoft spotted the breach 48 hours later, and was able to revoke the hackers’ access before they could successfully exfiltrate the data.

In a statement to BleepingComputer, Ubisoft said, “We are aware of an alleged data security incident and are currently investigating. We don't have more to share at this time.” VX-Underground posted redacted screenshots shared by the attacker that allegedly show they accessed Microsoft Teams conversations, the Ubisoft SharePoint server, Confluence and MongoDB Atlas. “The Threat Actor would not share how they got initial access,” VX-Underground wrote in a post on X. “Upon entry they audited the users access rights and spent time thoroughly reviewing Microsoft Teams, Confluence, and SharePoint.”

According to VX-Underground, the attackers’ attempt to get Rainbow Six Siege user data was unsuccessful. It’s unclear at this time if they were able to get any sensitive information before Ubisoft shut the whole thing down.

This article originally appeared on Engadget at https://www.engadget.com/ubisoft-reportedly-stopped-hackers-from-stealing-900gb-of-data-in-a-breach-this-week-162438766.html?src=rss https://www.engadget.com/ubisoft-reportedly-stopped-hackers-from-stealing-900gb-of-data-in-a-breach-this-week-162438766.html?src=rss