Mogilevich ransomware group lists EpicGames on its leak site

• Ransomware group: Mogilevich
• Country: United States
• Sector: Technology
• Announcement date: February 27, 2024

The threat actor group known as Mogilevich has posted an announcement on a leak site claiming to have compromised the servers of Epic Games. According to the claims made by the group, the breach resulted in the exfiltration of approximately 189 GB of data. The announcement was made on February 27, 2024, which coincides with the date the group claims the attack was carried out.

Details of the alleged attack

The Mogilevich group asserts that they successfully carried out an attack against Epic Games servers. Through this operation, the threat actors claim to have compromised various datasets belonging to the organization. Following the alleged breach, the group has stated that the stolen information is currently being offered for sale on the dark web. Furthermore, the threat actors have reportedly set a deadline for a ransom payment to prevent further consequences.

Information regarding the specific identity and background of the Mogilevich group remains limited. In the landscape of cybercrime, ransomware groups often utilize leak sites to exert pressure on their victims. This process frequently involves double extortion tactics, where attackers not only encrypt an organization's systems but also threaten to release sensitive data publicly if a ransom is not met. This method is designed to maximize leverage by threatening the victim's reputation and legal standing.

Data types involved in the claim

While the group has not provided any screenshots to verify their claims, they have specified several categories of sensitive information that they allege were compromised during the incident. The data types mentioned in the announcement include:

• Email addresses
• Passwords
• Full names
• Payment information
• Source code

It is important to note that the veracity of these claims has not yet been verified by any independent sources.

About Epic Games

Epic Games is an American video game and software developer. The company is widely recognized for creating popular video games and for developing the Unreal Engine game engine. In addition to its software and game development, the company operates the digital game storefront known as the Epic Games Store.

Potential impact and industry considerations

The alleged compromise of such a wide array of data poses significant risks. For the users of Epic Games, the theft of email addresses, passwords, full names, and payment information could lead to serious risks of identity theft and financial fraud. Such incidents often require users to undergo extensive credential resets and monitor their financial accounts closely.

Furthermore, the claim that source code has been compromised introduces technical risks. If the source code is indeed leaked, it may lead to the discovery of security vulnerabilities that could be exploited in future software updates. This creates a long-term security challenge for the organization and its user base. Because Epic Games is a US-based entity, a potential breach of this nature could be subject to various state-level privacy laws and federal regulations.

In the technology sector, organizations often face these types of sophisticated threats. To defend against such risks, companies typically implement multi-layered security strategies. This includes robust access controls, encryption of sensitive data at rest and in transit, and continuous monitoring of network traffic to detect unauthorized exfiltration. Additionally, maintaining a strong incident response plan and conducting regular security audits are standard practices to mitigate the impact of potential breaches. The potential for reputational damage following a public leak is a significant driver for organizations to invest heavily in defensive cybersecurity postures.