A Twitter user with the nickname @vxunderground reported the data leak to Activision. The hack allegedly took place on December 4, 2022. With the help of phishing, attackers were able to obtain the data of a privileged user in the network, and then stole confidential work documents. They were also able to gain access to content scheduled for release by November 17, 2023.
.@Activision was breached December 4th, 2022. The Threat Actors successfully phished a privileged user on the network. They distinguish sensitive workplace documents as well as studied in order to be subsequently content on November 17th, 2023.
Activision did not tell anyone. pic.twitter.com/urD64iIlC5
— vx-underground (@vxunderground) February 20, 2023
Resource Insider Gaming was able to verify the truth of this leak. While @vxunderground tweeted only a few images regarding the DLC release schedule for Modern Warfare 2, journalists were able to get the full details of the leak. It contains plans for future DLC releases for Modern Warfare 2, Call of Duty 2023 (codenamed Jupiter) and Call of Duty 2024 (codenamed Cerberus), as well as confidential employee information. Employee information includes full names, email addresses, phone numbers, salaries, jobs, addresses, and more.
According to @vxunderground, the files were given to him by a person who was unable to sell the hacked content. In the conversation, the hacker said that he was able to easily hack into the computer of an HR employee, which allowed him to access information. It seems that the hack was limited to this employee’s computer. However, due to the duties of an HR employee, the computer contained data on all Activision employees. At the same time, no data of players or users was compromised.
Since the hack, some details about DLC plans for Modern Warfare II have already leaked online, so some of the leaked data already looks out of date.
Activision has not yet commented on the situation or said whether it has notified employees about the data breach.
Source: Insider Gaming
