Ankama Hit by Major Cyberattack, Exposing Hundreds of Thousands of User Accounts
French video game publisher Ankama, based in Roubaix, disclosed a significant cyberattack on Thursday, resulting in unauthorized access to user data and account breaches across its popular games, including Dofus and Wakfu. The incident has potentially impacted hundreds of thousands of accounts, though the exact number remains unclear due to users often holding multiple accounts for in-game characters.
Compromised Data
The breach exposed the following user information:
- Full names
- Email addresses
- Partial payment details (first six and last four digits of credit cards expiration dates and CVV codes were not accessed)
- Order dates, billing countries, purchased items, and transaction amounts
Ankama confirmed that the stolen payment data alone is insufficient to process fraudulent transactions. However, the company acknowledged that some accounts were hijacked, with users reporting lost in-game items, deleted characters, and other unauthorized changes.
Regulatory Response & Prior Incident
The CNIL (France’s data protection authority) has been notified, and Ankama has filed a formal complaint. This attack follows a February 2026 breach, where unreleased episodes of Wakfu’s animated series were leaked content not slated for release until 2028.
While passwords were not exposed, security experts warn that the stolen data could fuel phishing scams and targeted fraud attempts. The incident underscores the growing risks of credential-based attacks in the gaming sector.
Ankama cybersecurity rating report: https://www.rankiteo.com/company/ankama
"id": "ANK1777566230",
"linkid": "ankama",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Hundreds of thousands of '
'accounts',
'industry': 'Gaming',
'location': 'Roubaix, France',
'name': 'Ankama',
'type': 'Video Game Publisher'}],
'customer_advisories': 'Users warned about phishing scams and targeted fraud '
'attempts',
'data_breach': {'number_of_records_exposed': 'Hundreds of thousands of '
'accounts',
'personally_identifiable_information': 'Full names, email '
'addresses',
'sensitivity_of_data': 'High (PII, partial payment details)',
'type_of_data_compromised': 'Personal Identifiable '
'Information, Payment Data, '
'Transaction Data'},
'description': 'French video game publisher Ankama disclosed a significant '
'cyberattack resulting in unauthorized access to user data and '
'account breaches across its popular games, including Dofus '
'and Wakfu. The incident has potentially impacted hundreds of '
'thousands of accounts, with some users reporting lost in-game '
'items, deleted characters, and other unauthorized changes.',
'impact': {'brand_reputation_impact': 'Potential brand reputation damage due '
'to data breach and account hijacking',
'data_compromised': 'Full names, email addresses, partial payment '
'details, order dates, billing countries, '
'purchased items, transaction amounts',
'identity_theft_risk': 'Phishing scams, targeted fraud attempts',
'operational_impact': 'Account hijacking, lost in-game items, '
'deleted characters',
'payment_information_risk': 'Partial payment details exposed '
'(insufficient for fraudulent '
'transactions)',
'systems_affected': 'Dofus, Wakfu game platforms'},
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'regulations_violated': 'Potential GDPR violations',
'regulatory_notifications': 'CNIL (France’s data '
'protection authority) '
'notified'},
'response': {'communication_strategy': 'Public disclosure, user advisories',
'law_enforcement_notified': 'Formal complaint filed'},
'title': 'Ankama Hit by Major Cyberattack, Exposing Hundreds of Thousands of '
'User Accounts',
'type': 'Data Breach, Account Hijacking'}