A group of ransomware hackers has claimed Epic Games as their victim.
According to VGC, a ransomware group calling itself Mogilevich claims to have attacked Epic Games and stolen nearly 200GB of the company’s internal data. According to Cyber Daily, this group posted information on a dark website specializing in leaked data, providing details about the attack targeting the game maker Fortnite.
“We silently attacked Epic Games’ servers,” the group’s announcement said. Mogilevich claimed to have stolen data including emails, passwords, full names, payment information, source code, and many other data, totaling up to 189GB.
The group also claims to sell what they steal and provides contact information for those who want to buy the data, including Epic Games employees. Mogilevich said the deadline for data to be sold is March 4 but did not give a specific amount, nor did he reveal the data processing plan if the deadline is exceeded.
According to Cyber Daily, Mogilevich is a relatively new ransomware group and Epic Games is their fourth target. The group’s first target was Infiniti USA, a subsidiary of Nissan, which was attacked last week. Currently, this group has not announced any authentic evidence of successful intrusion into Epic Games’ system.
In response to this information, Epic Games spoke up: “We are investigating but currently there is no evidence that this statement is accurate. Mogilevich has not contacted Epic or provided any authentic evidence. When we saw the allegations, we began investigating and contacted Mogilevich to request evidence. Mogilevich has not yet responded. The latest details we received were just a post on X requiring payment of 15,000 USD and proof to hand over the data.”
At the end of 2023, there was also an attack on Sony’s game development studio Insomniac Games, caused by the hacker group Rhysida. The group initially released a small amount of data as evidence, including annotated screenshots from the Wolverine game. Insomniac’s upcoming
Rhysida threatened to publish all stolen data within 7 days and launched a data auction with a starting price of 50 Bitcoin (about 2 million USD). A week later, the group followed through on its threat and is said to have released about 98% of the stolen data