Insomniac Games Targeted in Cybersecurity Attack
Rhysida, a notorious ransomware group, has targeted Insomniac Games in a cyber security attack, aiming to auction off sensitive data.
Spider-Man 2 and Marvel’s Wolverine developer Insomniac Games has reportedly been hacked by a ransomware group looking to auction the data off. The notorious group, Rhysida, is looking for 50 bitcoin, or $2 million, in an auction posted on its website. Sony Interactive Entertainment, which owns Insomniac Games, is looking into the reported hack. A cybersecurity news website, CyberDaily, first reported the breach.
“We are aware of reports that Insomniac Games has been the victim of a cyber security attack,” an SIE representative told Polygon. “We are currently investigating this situation. We have no reason to believe that any other SIE or Sony divisions have been impacted.”
Rhysida posted a collage of screenshots on its website, purportedly its proof of the breach. The information published appears to include emails between Insomniac staff, employment documents, Marvel’s Wolverine screenshots, and passports or other government documents for former and current Insomniac Games staff — including Spider-Man 2 voice actor Yuri Lowenthal.
The United States Federal Bureau of Investigations and Cybersecurity and Infrastructure Security Agency issued a warning about Rhysida in November. The group has claimed responsibility for healthcare company attacks and, more recently, the British Library hack. The CISA warned that Rhysida has been targeting “education, healthcare, manufacturing, information technology, and government sectors since May 2023.”
The sort of information stolen makes this a serious attack that impacts both Insomniac Games employees and its business operations. In September 2022, London police arrested two teenagers that hacked Grand Theft Auto 5 publisher Rockstar Games and leaked development clips of the highly anticipated Grand Theft Auto 6. Both teenagers were convicted on several counts of fraud, hacking, and blackmail.
