Hackers Target Epic Games, Claim Data Theft

A hacking collective known as Mogilevich has announced the breach of the servers of Epic Games, famed for developing popular games such as Fortnite, Unreal Tournament, and Gears of War, as well as for creating and maintaining the photorealistic game engine Unreal Engine. Additionally, the company owns its online video game store, which has been attempting to compete with Valve’s Steam for several years.

The breach declaration was published on February 27 on the group’s dark web leak site. According to a representative of Mogilevich, the attack on Epic Games’ servers was conducted quietly and unnoticed. As a result, the group claims to have acquired 189 gigabytes of the company’s confidential data.

The stolen data allegedly includes user personal information, such as email addresses, passwords, full names, and payment information; as well as the source code of some of the company’s products and a multitude of other data. All of this has been put up for sale by the hackers, and it’s far from certain that the company’s competitors will not acquire these data before Epic Games itself.

Mogilevich is a new extortion group. It first made its presence known in the cybercriminal community on February 20 of this year when it put up for sale data stolen from Infinity USA, a subsidiary of Nissan. Epic Games has become the fourth victim of this group.

The representatives of “Mogilevich” have not specified a ransom amount for the data, and the deadline for payment by Epic Games or purchase by someone else is set for March 4. It is important to note that, unlike some previous instances of cyberattacks, the group has not provided any proof of the hack.

“We are investigating but there is currently zero evidence that these claims are legitimate,” an Epic Games spokesperson said in a statement. “Mogilievich has not contacted Epic or provided any proof of the veracity of these allegations. When we saw these allegations, which were a screenshot of a darkweb webpage in a Tweet from a third party, we began investigating within minutes and reached out to Mogilevich for proof.”

It is worth mentioning that a similar attack previously targeted a related company in the industry—video game developer Insomniac Games. As a result, hackers managed to acquire about 1.7 TB of confidential data, including a pre-release build of Spider-Man 2 for PS5, from which enthusiasts have already compiled and released a playable version for PC, significantly impacting Sony’s pride and pocketbook.

Cybersecurity experts continue to closely monitor the activities of the Mogilevich group, trying to compile a complete profile of these malefactors. Undoubtedly, we will hear about more significant breaches from this extortion group.