Insomniac Games Data Leak, 1.67 Terabytes and Over 1.3 Million Files Released, 98% Uploaded
Recently, Insomniac Games faced a significant cyberattack, with the Rhysida ransomware group claiming responsibility. According to a report by Cyber Daily, the ransomware gang released 1.67 terabytes of Insomniac Games’ internal data on their darknet site, following the lapse of their ransom deadline. This extensive data breach includes over 1.3 million files, many related to the highly anticipated Wolverine video game.
Rhysida, after failing to negotiate the sale of this data for about US$2 million, reportedly uploaded 98% of the data they possessed. The group had initially threatened to release the data on December 12, providing proof-of-hack material such as passport scans. The offer for purchase was open to any party, including Sony.
The leaked files, divided into three batches, reveal various aspects of Wolverine’s game development, including level designs, character materials, and other game-related graphics. Additionally, the leak comprises files from Insomniac’s Spider-Man 2 project and sensitive internal HR documents like employment forms and termination papers. Internal communications, including screenshots of Slack channels and contents from employee computers, were also part of the leak.
An intriguing element for gaming enthusiasts is a publishing agreement between Marvel and Sony Interactive Entertainment. This document, signed by Marvel’s Isaac Perlmutter and Sony’s Jim Ryan, outlines three upcoming X-Men games, with Wolverine being the first. The agreement details release dates and financial commitments, including Sony’s expected investment of at least US$120 million per title.
In a communication with Cyber Daily, a Rhysida spokesperson indicated that Sony and Insomniac were deliberately targeted, citing the nature of their game development as making them a vulnerable target. The hack was reportedly executed with relative ease, gaining domain administrator access within 20-25 minutes. Despite Sony’s investigation into the incident, Rhysida expressed skepticism about its effectiveness.
Rhysida’s primary motive behind this attack was financial gain, as per their statement to Cyber Daily.
