A threat actor allegedly posted data purportedly taken from the dominant game company Activision on the Breached hacking site.
Activision Azure database, which the threat actors claim to have gotten 19,444 unique records from, is being made available for free.
Employee information from Activision, including names, phone numbers, job titles, addresses, and email addresses, was exposed.
The website Insider Gaming claimed that critical employee information had been exposed, despite Activision's insistence that neither the game code nor user data had been stolen.
Source: https://securityaffairs.com/142779/data-breach/activision-data-leak.html
TPRM report: https://scoringcyber.rankiteo.com/company/activision
"id": "act194381023",
"linkid": "activision",
"type": "Breach",
"date": "02/2023",
"severity": "100",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Gaming',
'name': 'Activision',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': 19444,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Employee information']},
'description': 'A threat actor allegedly posted data purportedly taken from '
'the dominant game company Activision on the Breached hacking '
'site. Activision Azure database, which the threat actors '
'claim to have gotten 19,444 unique records from, is being '
'made available for free. Employee information from '
'Activision, including names, phone numbers, job titles, '
'addresses, and email addresses, was exposed. The website '
'Insider Gaming claimed that critical employee information had '
"been exposed, despite Activision's insistence that neither "
'the game code nor user data had been stolen.',
'impact': {'data_compromised': ['Employee information including names, phone '
'numbers, job titles, addresses, and email '
'addresses'],
'systems_affected': ['Azure database']},
'references': [{'source': 'Insider Gaming'}],
'title': 'Activision Data Breach',
'type': 'Data Breach'}