Cybercriminals have hacked into EA Sports internal slack channel, gained further access and downloaded FIFA 21 source code of 780 GB data and leaked it online after EA Sports denied to make the ransom.
The hacked data was first published as a sample of 1.3 GB proving their claim, and then the intention to sell it to third part buyer intensified.
The Modus Operandi of EA Sports hack
The hackers found an authentication cookie of an EA sports employee which led them to the internal slack channel, from where they replicated the employee’s account to read through the slack data. Furthermore, they requested access from the IT support disguising themselves as the employee to gain privileges to EA sports repository, from where they had downloaded the source code of FIFA 21 game files. Also, they had gained info on the server-side services of the company.
The EA Sports hack was first disclosed on June 10, when the criminals posted the details on an dark web hacking forum, pricing the stolen data at $28 million.
Unsuccessful EA Sports Hack for the criminals
The hackers tried to sell this stolen source code in the dark web, but considering its a game file it didn’t get the expected traction, as the buyers usually prefer personal data or financial information over others. Considering there isn’t any buyers the hackers went back to EA demanding payment for not disclosing the source code online, but as expected EA sports denied making the payment and shunned the hackers down, leaving them no option but to leak the source code online.
EA Sports have also mentioned that no player’s data has been leaked, and users need not worry about their personal information.
“Following the incident, we’ve already made security improvements and do not expect an impact on our games or our business. We are actively working with law enforcement officials and other experts as part of this ongoing criminal investigation.” – EA Spokesperson.
More details on the recovery and incident handling from EA Sports regarding this hack will be shared when the details are publicly available.
Subscribe to our newsletter for daily alerts on cyber events, you can also follow us on Facebook, Linkedin, Instagram, Twitter and Reddit.
You can reach out to us via Twitter or Facebook, for any advertising requests.
