Cybercriminals hacked into EA’s online networks and allegedly stole 780GB of data that includes FIFA 21 and Frostbite source code, debug tools, SDKs and API keys.
Electronic Arts (EA) is the publisher of popular gaming titles like FIFA and Battlefield.
According to a post on a cybercriminal forum last Sunday, the dump also contains FIFA 21 source code and tools, FIFA 22 API keys, SDK and debugging tools, among other tools, SDK and API keys. The person who posted is looking to sell the data and said “You have full capability of exploiting on all ea services”.
The posts doesn’t talk about any personal data in the 780GB dump and includes some screenshots of files of the games as samples.
EA said that they were investigating a recent incident that involved a breach in their network leaked “a limited amount of game source code and related tools were stolen” but the game publisher maintains that “no player data was accessed” and that there isn’t “any risk to player privacy”.
“We are investigating a recent incident of intrusion into our network where a limited amount of game source code and related tools were stolen. No player data was accessed, and we have no reason to believe there is any risk to player privacy. Following the incident, we’ve already made security improvements and do not expect an impact on our games or our business. We are actively working with law enforcement officials and other experts as part of this ongoing criminal investigation,” EA said in a statement to Motherboard.
Hackers say they gained access to EA’s network using stolen cookies purchased for $10
Update (11/06/21): A representative of the cybercriminals told Motherboard that they gained access to EA’s Slack channel by purchasing stolen cookies online for $10. Then they tricked EA’s IT support and requested a multifactor authentication token to gain access to EA’s corporate network, where they found a game compiling tool for EA developers. They logged in, created a VM and then accessed another service to download FIFA’s source code, among others.