364

Epic Games reportedly hit by 189GB hack, including login and payment info (www.rockpapershotgun.com)

submitted 8 months ago by Carighan@lemmy.world to c/games@lemmy.world

40 comments fedilink hide all child comments

The report comes from Cyber Daily, who also broke the news of last year's confirmed hack attack on Insomniac Games. The site claims that new ransomware group Mogilevich are the culprits, as per the screencap of a darkweb posting above, and that the hackers are now trying to get Epic or another party to pay up for the return of the data, with a deadline of 4th March.

Epic, however, say that they've yet to see any proof that a ransomware attack has taken place. "We are investigating but there is currently zero evidence that these claims are legitimate," a spokesperson told Eurogamer this morning.

you are viewing a single comment's thread
view the rest of the comments

[-] Carighan@lemmy.world 11 points 8 months ago

Hrm, depends. Usually in modern online payment systems it should be impossible for the debitor to have the CVC of the card and hence leaked information could not make actual payments from it, but it could spam the card's number with bogus payments to continuously keep it being blocked.

In any case if you're affected I would recommend asking your bank how to proceed, just to be on the safe side.

[-] webhead@lemmy.world 8 points 8 months ago* (last edited 8 months ago)

That's not a requirement. You can make payments without one though the odds of approval aren't great. If the actual real card numbers got leaked, you need to cancel that card. Also if they actually leaked REAL card numbers, Epic is going to be in deep shit with the card brands.

This article has no real details though so we'll see. I kind of doubt this is legit.

[-] dai@lemmy.world 4 points 8 months ago

I guess the answer is money, but why would you do any handling of card details in-house. Having a third party process transactions passes to some degree ensuring security onto said third party.

I'd still doubt any risk of full card details being leaked unless the hack goes much deeper than just Epic.

[-] elvith@feddit.de 4 points 8 months ago

On the other hand, when steam had a leak a few years ago (where you could see other people’s account details after logging in instead of yours) my credit card got exchanged automatically by the bank, as they saw that I had used it to buy games on steam - even though in this „leak“ only the last 4 digits were leaked and nothing more