The network of gaming giant Electronic Arts (EA) was breached by hackers and 750 GB of data were stolen including game source code and debug tools.
EA is a game developer and publisher behind multiple high-profile brands such as Madden NFL, EA SPORTS FIFA, Battlefield, The Sims, and Need for Speed.
EA confirmed the data breach stating that it was not a ransomware attack and that a limited amount of code and related tools were stolen. They said that they do not expect any impact to their games or business.
The hackers selling EA’s data claims to have stolen the full FIFA source, EA game clients, and points used as in-game currency.
In-game points are used by cybercriminals for money laundering purposes. The details regarding how the threat actor accessed the EA’s network is not known at the moment.
The attackers claim to have access to all of EA’s services, telling customers willing to pay $28 million for the stolen data that they will also gain “full capability of exploiting on all ea services.
EA has over 450 million registered players worldwide.
The massive trove of data that were stolen from EA’s network, includes the following
- FrostBite game engine source code and debug tools
- FIFA 21 matchmaking server code
- FIFA 22 API keys and SDK & debug tools
- debug tools, SDK, and API keys
- proprietary EA games frameworks
- XBOX and SONY private SDK & API key
- XB PS and EA pfx and crt with key
The attackers also shared screenshots of directory listings and source code as proof that the stolen information is legitimate.
The attackers’ posts promoting the stolen data on various marketplaces and hacking forums were found using Kela’s Dark Beast intelligence service.
According to an EA spokesperson, the investigation process is ongoing and that no player data was accessed, and so there isn’t any risk to player privacy.
Following the incident, the company has already made security improvements and do not expect any impact on their games or business.
He added that they are actively working with law enforcement officials and other experts as part of the ongoing investigation.
Image Credits : VICE
The post Gaming giant Electronic Arts breached, game source code stolen first appeared on Cybersafe News.