Massive Leak Exposes Insomniac Games

The gaming world has yet again taken a turn with the recent leak of sensitive data from Insomniac Games. Rhysida, a notorious hacking group, proudly claimed responsibility, boasting access to the game developer’s servers and procuring over 1.3 million files.

Refusing to comply with their hefty demand of $2 million, the hackers unleashed a torrent of information—nearly 1.7 terabytes of confidential documents, images, and more.

Our sympathies to @insomniacgames and all the affected team members. After all the effort and dedication they have poured into their games, they didn't deserve this. No one does. The hackers also leaked employee's personal information, which is truly disgraceful and shameful.

— Remedy Entertainment (@remedygames) December 19, 2023

Insomniac Games Projects and Employee Data Leak

The compromised data not only encompasses details about the highly anticipated Marvel’s Wolverine but also sheds light on other undisclosed projects. Given the nature of this breach, we will be refraining from including the specifics regarding the leaked content. The information extends beyond game development, exposing sensitive employee data such as tax reports, internal messages, and even passports.

 “Not sold [sic] data was uploaded, data hunters, enjoy.”

https://twitter.com/ZaaX02/status/1737100733441327201

Some data has been sold, as 98% of the pilfered files have been made public.

The identity of the buyer remains shrouded in mystery. The hackers meticulously organized the data into three packages, each link appropriately labeled. The leaks go beyond documents, offering a glimpse into the design images and character modeling of both the Wolverine game and Marvel’s Spider-Man 2.

Image Courtesy: Insomniac Games

• Among the leaked documents is a significant agreement between Sony Interactive Entertainment and Marvel, signed by Jim Ryan, still at the helm of PlayStation, and Isaac Perlmutter of Marvel Entertainment.
• Dated July 26, 2021, this publishing agreement encompasses Marvel’s Wolverine and two other undisclosed games in the franchise, each lacking an official title.

The admission by a Rhysida representative to Cyber Daily reveals that they knowingly targeted game developers, perceiving them as easy prey. The group claims that infiltrating the studio’s internal network was a swift operation, requiring no more than 20-25 minutes. Sony has responded by initiating an investigation into the incident, aiming to unveil the extent of the damage.