/

Insomniac Games Data Breach: What & How It Happened?

Insomniac Games Data Breach: What & How It Happened?

Twingate Team

Jun 28, 2024

Insomniac Games, a renowned video game developer, fell victim to a data breach in November 2023. The incident was orchestrated by the Rhysida ransomware group, which demanded a substantial ransom for the stolen data. Upon non-payment, the group released a massive amount of data online, including sensitive employee information and materials related to the company's upcoming Wolverine game.

How many accounts were compromised?

The breach impacted data related to over 400 employees.

What data was leaked?

The data exposed in the breach included in-development game materials, design documents, casting information, level designs, internal investigations, disciplinary reports, personal details of employees, passport scans, recorded videos of meetings, contract information, and licensing agreements with Marvel and Nvidia.

How was Insomniac Games hacked?

The Rhysida ransomware group infiltrated Insomniac Games' systems, likely through phishing attacks and other methods, leading to a massive data breach. The extent of the breach and the specific techniques used by the hackers remain unclear.

Insomniac Games's solution

In response to the hacking incident, Insomniac Games took several measures to address the situation and protect its employees. The company sent data breach notification letters to affected employees and extended their ID Watchdog services, offering two additional years of complimentary credit monitoring and identity restoration. Insomniac Games also set up a dedicated call center to answer employee questions related to the ransomware attack. While specific security enhancements and prevention measures remain unclear, it is evident that the company is taking steps to mitigate the impact of the breach and safeguard its employees and assets.

How do I know if I was affected?

Insomniac Games has not publicly disclosed whether they reached out to affected users. However, if you are concerned about your credentials being compromised, you can visit Have I Been Pwned to check if your email has been involved in any known data breaches.

What should affected users do?

In general, affected users should:

  • Change Your Passwords: Immediately update your passwords for any accounts that may have been compromised. Make sure the new passwords are strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on any affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity and report any unauthorized access or transactions to the appropriate parties.

For more specific help and instructions related to Insomniac Games's data breach, please contact Insomniac Games Support directly.

Where can I go to learn more?

If you want to find more information on the Insomniac Games data breach, check out the following news articles:

Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.

/

Insomniac Games Data Breach: What & How It Happened?

Insomniac Games Data Breach: What & How It Happened?

Twingate Team

Jun 28, 2024

Insomniac Games, a renowned video game developer, fell victim to a data breach in November 2023. The incident was orchestrated by the Rhysida ransomware group, which demanded a substantial ransom for the stolen data. Upon non-payment, the group released a massive amount of data online, including sensitive employee information and materials related to the company's upcoming Wolverine game.

How many accounts were compromised?

The breach impacted data related to over 400 employees.

What data was leaked?

The data exposed in the breach included in-development game materials, design documents, casting information, level designs, internal investigations, disciplinary reports, personal details of employees, passport scans, recorded videos of meetings, contract information, and licensing agreements with Marvel and Nvidia.

How was Insomniac Games hacked?

The Rhysida ransomware group infiltrated Insomniac Games' systems, likely through phishing attacks and other methods, leading to a massive data breach. The extent of the breach and the specific techniques used by the hackers remain unclear.

Insomniac Games's solution

In response to the hacking incident, Insomniac Games took several measures to address the situation and protect its employees. The company sent data breach notification letters to affected employees and extended their ID Watchdog services, offering two additional years of complimentary credit monitoring and identity restoration. Insomniac Games also set up a dedicated call center to answer employee questions related to the ransomware attack. While specific security enhancements and prevention measures remain unclear, it is evident that the company is taking steps to mitigate the impact of the breach and safeguard its employees and assets.

How do I know if I was affected?

Insomniac Games has not publicly disclosed whether they reached out to affected users. However, if you are concerned about your credentials being compromised, you can visit Have I Been Pwned to check if your email has been involved in any known data breaches.

What should affected users do?

In general, affected users should:

  • Change Your Passwords: Immediately update your passwords for any accounts that may have been compromised. Make sure the new passwords are strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on any affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity and report any unauthorized access or transactions to the appropriate parties.

For more specific help and instructions related to Insomniac Games's data breach, please contact Insomniac Games Support directly.

Where can I go to learn more?

If you want to find more information on the Insomniac Games data breach, check out the following news articles:

Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.

Insomniac Games Data Breach: What & How It Happened?

Twingate Team

Jun 28, 2024

Insomniac Games, a renowned video game developer, fell victim to a data breach in November 2023. The incident was orchestrated by the Rhysida ransomware group, which demanded a substantial ransom for the stolen data. Upon non-payment, the group released a massive amount of data online, including sensitive employee information and materials related to the company's upcoming Wolverine game.

How many accounts were compromised?

The breach impacted data related to over 400 employees.

What data was leaked?

The data exposed in the breach included in-development game materials, design documents, casting information, level designs, internal investigations, disciplinary reports, personal details of employees, passport scans, recorded videos of meetings, contract information, and licensing agreements with Marvel and Nvidia.

How was Insomniac Games hacked?

The Rhysida ransomware group infiltrated Insomniac Games' systems, likely through phishing attacks and other methods, leading to a massive data breach. The extent of the breach and the specific techniques used by the hackers remain unclear.

Insomniac Games's solution

In response to the hacking incident, Insomniac Games took several measures to address the situation and protect its employees. The company sent data breach notification letters to affected employees and extended their ID Watchdog services, offering two additional years of complimentary credit monitoring and identity restoration. Insomniac Games also set up a dedicated call center to answer employee questions related to the ransomware attack. While specific security enhancements and prevention measures remain unclear, it is evident that the company is taking steps to mitigate the impact of the breach and safeguard its employees and assets.

How do I know if I was affected?

Insomniac Games has not publicly disclosed whether they reached out to affected users. However, if you are concerned about your credentials being compromised, you can visit Have I Been Pwned to check if your email has been involved in any known data breaches.

What should affected users do?

In general, affected users should:

  • Change Your Passwords: Immediately update your passwords for any accounts that may have been compromised. Make sure the new passwords are strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on any affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity and report any unauthorized access or transactions to the appropriate parties.

For more specific help and instructions related to Insomniac Games's data breach, please contact Insomniac Games Support directly.

Where can I go to learn more?

If you want to find more information on the Insomniac Games data breach, check out the following news articles: