In a breach this week, Ubisoft apparently prevented hackers from collecting 900GB of data

Like Microsoft’s Xbox Game Pass, the game subscription service Ubisoft+ offers flat-rate access to games from the French publisher for a monthly fee. Ubisoft services were invaded via a security breach this week. According to information from VX Underground, hackers attempted to steal 900GB of user data. The breach was recognized after 48 hours of attack, and the attack was revoked before the hackers could extract data files.

Ubisoft replied, “We are aware of an alleged data security incident and are currently investigating,” in a statement to BleepingComputer. Right now, we have nothing further to disclose. Redacted screenshots that were given by the attacker and purportedly showed them accessing Microsoft Teams discussions, the Ubisoft SharePoint server, Confluence, and MongoDB Atlas were posted by VX-Underground. On X, VX-Underground said, “The Threat Actor would not share how they got initial access.” “Upon entry, they thoroughly reviewed Microsoft Teams, Confluence, and SharePoint and audited the users’ access rights.”

VX-Underground claims that the attackers’ attempt to obtain user data for Rainbow Six Siege was unsuccessful. Whether they were able to obtain any crucial information prior to Ubisoft shutting everything down is unknown at this time.