Insomniac Games, a subsidiary of Sony, finds itself at the center of a cyberattack as the ransomware group, Rhysida, reportedly unveils a staggering 1.67 terabytes of data on the dark web. This cache comprises more than 1.3 million files allegedly obtained from Insomniac’s servers.
Rhysida had previously claimed access to Insomniac’s files earlier in the month, offering them in an auction format for $2 million, including Sony as a potential bidder. The recent release of the files implies that no party was willing to meet the ransom demand.
The leaked data reportedly contains personal information related to numerous Insomniac employees. Moreover, it allegedly encompasses content from Insomniac’s recently launched PlayStation 5 game, Spider-Man 2.
Of greater concern to Insomniac is the reported inclusion of early content from the developer’s highly anticipated Wolverine game, unveiled in September 2021. The stolen files also purportedly comprise documents regarding two undisclosed Marvel X-Men-based games that Insomniac may be developing for Sony’s PlayStation consoles.
A representative from Rhysida, as reported by Cyber Daily, claimed swift access to Insomniac’s domain administrator within 20–25 minutes of network infiltration. Presently, neither Sony nor Insomniac has officially addressed the reported data breach.
This incident isn’t the first time a Sony-owned entity has encountered a significant cyberattack. Notably, in 2011, the PlayStation Network suffered a substantial hack that led to the suspension of its online gaming services for an extended period. Subsequently, in 2014, Sony faced another breach by a cybercriminal group, purportedly based in North Korea, resulting in the release of confidential personal and financial documents.
The recent breach raises concerns about cybersecurity vulnerabilities faced by major corporations, highlighting the need for stringent measures to safeguard sensitive information from such malicious cyber threats.