Support NeoGAF

[adamsapple]

Fortnite game developer Epic Games allegedly hacked

A ransomware gang claims to have nearly 200 gigabytes of internal data, but Epic Games says there is no evidence of any compromise.

www.cyberdaily.au

A relative newcomer to the ransomware scene is claiming to have successfully hacked game developer and distributor Epic Games.

The Mogilevich gang made the claim overnight, posting the details of the apparent hack on its darknet leak site.

“We have quietly carried out an attack to [sic] Epic Games’ servers,” a Mogilevich spokesperson said.

The gang claims to have 189 gigabytes of data, including “email, passwords, full name, payment information, source code and many other data”. The data is currently listed as up for sale.

“If you are an employee of the company or someone who would like to buy the data, click on me,” a hyperlink on the site said. The link leads to the group’s contact page, where a Tox messaging address can be found.

Mogilevich has not asked for a specific dollar figure for the data, and the current deadline for Epic Games to pay – or for someone else to purchase the data outright – is 4 March. Nor has it posted any proof-of-hack material, as Rhysida did with last year’s Insomniac Games hack.

 

[Thick Thighs Save Lives]

The gang claims to have 189 gigabytes of data, including “email, passwords, full name, payment information, source code and many other data”. The data is currently listed as up for sale.

I presume that this sensitive info is encrypted, but big yikes if true.

Also, brb changing my epic games account password.

 

[ManaByte]

“email, passwords, full name, payment information, source code and many other data”

If true, this is going to be the biggest lawsuit in the history of the industry. Fortnite.

 

[Pejo]

Where are all you "it's just another launcher" guys at now?

hope it's a nothingburger and no GAFers are affected

 

[ManaByte]

Where are all you "it's just another launcher" guys at now?

Epic has twice as many Fortnite players than people who bought a PS2 or Switch.

These people weren't targeting the Epic Games Store. They were targeting Fornite.

 

[shaddam]

I only care about the possible unreal remaster leaks

 

[Topher]

I presume that this sensitive info is encrypted, but big yikes if true.

Also, brb changing my epic games account password.

Setup that 2FA while you are at it

 

[Barakov]

Oh no....

 

[Yoboman]

Never played Fortnite or signed up for Epic store

 

[Wildebeest]

Where are all you "it's just another launcher" guys at now?

hope it's a nothingburger and no GAFers are affected

Sadly, hacking seems to be on the rise. What can you do, other than go off the grid and live in a remote shack or something.

 

[The_Observer]

I only care about the possible unreal remaster leaks

Or a possible new Unreal Tournament. I will forever hate Fortnite because they left UEngine 4 UT to die because of it. Actually, that just only one of the many reasons I hate that shite for

 

[pqueue]

NO!!!!!!!!

They are going to steal all my weekly free games that I will never play!!!!!!!!!!! And now I won't be able to even if I wanted to!!!!!!!

 

[ManaByte]

NO!!!!!!!!

They are going to steal all my weekly free games that I will never play!!!!!!!!!!! And now I won't be able to even if I wanted to!!!!!!!

This is quite the take when 300 million people potentially had their information stolen.

 

[spons]

If this shit wasn't encrypted then they'll get torn 3 extra assholes for gross negligence.

 

[pqueue]

My basic information was there too. But I am smart enough to not let Epic Games have my payment information.

 

[SJRB]

There's no way that sensitive information is not encrypted.

Still blows that this happened though.

 

[ManaByte]

There's no way that sensitive information is not encrypted.

Still blows that this happened though.

Depends how they encrypted it. Lots of companies still don’t salt their hashes.

 

[adamsapple]

NO!!!!!!!!

They are going to steal all my weekly free games that I will never play!!!!!!!!!!! And now I won't be able to even if I wanted to!!!!!!!

This is the wrong take. C'mon.

 

[nani17]

OMG, they have my.....wait I only signed up to get the free games they don't have my pay details. Those bastards are trying to steal my free games I never play

 

[Roman Empire]

Hey, I never used epic and never had an epic account so I'm safe this time. Hope this ends up being nothing but I'd change my password, set 2fa if I were you guys. This is big if true. Godspeed to all users.

 

[WitchHunter]

Fortnite game developer Epic Games allegedly hacked

A ransomware gang claims to have nearly 200 gigabytes of internal data, but Epic Games says there is no evidence of any compromise.

www.cyberdaily.au

I never understand how could they get that much data out? I mean what the fuck sysops do at these companies?

Btw, there is no warning on the login page @ https://store.epicgames.com/en-US/

 

[ManaByte]

OMG, they have my.....wait I only signed up to get the free games they don't have my pay details. Those bastards are trying to steal my free games I never play

300 million people (the population of the US) may have had their information stolen and people are making shitposts.

 

[nani17]

300 million people (the population of the US) may have had their information stolen and people are making shitposts.

I agree not a funny post. My apologies I wasn't thinking popularly

 

[Garibaldi]

Alan Wake 2 better have been worth it

 

[Maiden Voyage]

Couldn't have happened to a better company.

 

[Z O N E]

Changed my password yesterday.... I guess it's time to change it again.

 

[Labadal]

I just want a free game out of this.

 

[Mr.Phoenix]

Leaks incoming?

 

[DGrayson]

I just want a free game out of this.

Good call.

"I lost all my data and someone got my credit card info and now my credit is fucked ... am I entitled to compensation?"

 

[cash_longfellow]

NO!!!!!!!!

They are going to steal all my weekly free games that I will never play!!!!!!!!!!! And now I won't be able to even if I wanted to!!!!!!!

My basic information was there too. But I am smart enough to not let Epic Games have my payment information.

Wow, talk about “the world revolves around me and only me, I can do no wrong, and I’m the only one on Earth who is always right…everyone else is stupid” personality disorder.

 

[Labadal]

Good call.

"I lost all my data and someone got my credit card info and now my credit is fucked ... am I entitled to compensation?"

I use dummy account, you silly billy

 

[calistan]

It's not the first time for Epic. They had a security 'lapse' in 2018, and I got flooded with spam emails shortly after that. I asked them to delete my account, since it was only created for the Fortnite beta, but they never replied (probably their customer service address had been hacked too).

 

[Gudji]

Fuckkk they gonna find out I never bought a single game on EGS.

 

[Hudo]

I presume that this sensitive info is encrypted,

heh.

 

[SmokedMeat]

I just want a free game out of this.

Please enjoy Rocket League, on the house!

 

[Neilg]

If anyone has ever worked directly at or as a contractor for epic you'll know how wild this is. Their security is the most anal, convoluted process going, and multiple times when I was told that things have to be this way because they run a tight ship as epic likes to keep things ultra secure, but it's to the point where the hoops they're making employees jump through will cause a significant drop in security as people try to streamline their experience.
I'm willing to bet this hack was some basic social engineering on someone with a high level admin account...

 

[MonkeyClaw36]

This is the wrong take. C'mon.

Stop being a ResetEra user. It was meant in jest and you damn well know it.

 

[FStubbs]

I never understand how could they get that much data out? I mean what the fuck sysops do at these companies?

Btw, there is no warning on the login page @ https://store.epicgames.com/en-US/

Sometimes I suspect these "hacks" are inside jobs.

 

[SportsFan581]

Depends how they encrypted it. Lots of companies still don’t salt their hashes.

I hope that's not the case. Talk about noob city if it were. I've never had any payment information on file with them, but yikes if they kept that kind of data around in a readable format.

 

[Three]

Never played Fortnite or signed up for Epic store

Rocket league?

 

[Thick Thighs Save Lives]

Update on the alleged ransomware hack via VGC

 

[Mr Moose]

They'd only have my email address and password maybe. I've only used PayPal with Epic store and didn't save it on there.
I hope dickheads that do this type of shit get caught.

 

[ManaByte]

Update on the alleged ransomware hack via VGC

 

[ShirAhava]

*sets up 2factor*

Only used it for free games so no payment info

 

[Gamer_By_Proxy]

I know when I want to steal CC info, I target Fortnite players . . .

 

[Lucifers Beard]

I think I bought a game 3 years ago on there which I refunded because it was shit. Those card details will have expired at this point though.

These things happen and will continue to happen. Wonder when they'll inform us that it happened (if it happened), they only have 72 hours to report to data protection regulators in EU and should inform everyone that has an account with them.

Obviously, if you haven't already, change your password and enable 2FA.

 

[Magic Carpet]

Just signed in and they sent me a 2FA code through email. Email 2FA seems to be the only way to combat the Sim Swap hack I keep reading about. I've asked my banks to send email codes but nope they will only do it through text.

 

[Sentenza]

Oh no, all my payment info.

Nah, just kidding. Never spent a cent there.

 

[Nvzman]

Wow, talk about “the world revolves around me and only me, I can do no wrong, and I’m the only one on Earth who is always right…everyone else is stupid” personality disorder.

Yea I actually like Fortnite, I don't like the Epic Games Launcher but Fortnite is probably the ONLY F2P GAAS to do it right. Constant free content updates, actually cool and funny skins, good gameplay, lots of variety and social content, etc.
It has a pretty wide appeal too, as much as it gets derided for its appeal to kids there's plenty of shit for boomers too, like the various UT references and skins for things like Predator, Alien, Evil Dead, etc.
Most of the hate around Fortnite comes from its stigma, on its own merits its a pretty solid, fun shooter.

Hope that this ransomware attack gets formally discussed by Epic soon so we know the full scale, usually breaches like these have to be reported.

 

[StreetsofBeige]

For all store sites just don’t have your credit card info saved. Problem solved. Who cares if you got to manually type in your payment info anytime. It’s not like your buying something every day on an e-store.