Supercell Confirms Cyberattack Targeting Internal Meeting Platform
Finnish game developer Supercell disclosed a cyberattack on October 21, revealing that an unauthorized party accessed a platform used for hosting internal meetings and presentations. The breach, part of a series of attacks last week, exposed videos featuring current and former employees, guests, and partners from recorded events, along with names, images, voices, and user email addresses.
Supercell responded by blocking further access, taking the service offline, and launching an investigation. The company has filed a police report, notified authorities under the EU Cyber Resilience Act, and alerted the Data Protection Ombudsman. While the investigation remains ongoing, Supercell confirmed that no player data was compromised.
The stolen material could be exploited for phishing, impersonation, or other scams, prompting the company to warn individuals to remain cautious of suspicious messages. Those who participated in Supercell-hosted events are considered "very likely" affected and can contact [email protected] for further details.
Source: https://mobilegamer.biz/supercell-hit-by-cyberattack-but-says-no-player-data-was-affected/
Supercell TPRM report: https://www.rankiteo.com/company/supercell
"id": "sup1792672829",
"linkid": "supercell",
"type": "Breach",
"date": "10/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Current and former employees, '
'guests, and partners who '
'participated in recorded events',
'industry': 'Gaming',
'location': 'Finland',
'name': 'Supercell',
'type': 'Company'}],
'customer_advisories': 'Affected individuals can contact '
'[email protected] for further details.',
'data_breach': {'file_types_exposed': ['Videos'],
'personally_identifiable_information': 'Names, images, '
'voices, email '
'addresses',
'sensitivity_of_data': 'High (personal and professional data)',
'type_of_data_compromised': 'Videos, personally identifiable '
'information (names, images, '
'voices, email addresses)'},
'date_detected': '2023-10-21',
'date_publicly_disclosed': '2023-10-21',
'description': 'Finnish game developer Supercell disclosed a cyberattack '
'where an unauthorized party accessed a platform used for '
'hosting internal meetings and presentations. The breach '
'exposed videos featuring current and former employees, '
'guests, and partners from recorded events, along with names, '
'images, voices, and user email addresses.',
'impact': {'data_compromised': 'Videos, names, images, voices, and user email '
'addresses',
'identity_theft_risk': 'Potential for phishing, impersonation, or '
'other scams',
'operational_impact': 'Service taken offline, investigation '
'launched',
'systems_affected': 'Internal meeting and presentation platform'},
'investigation_status': 'Ongoing',
'recommendations': 'Affected individuals should remain cautious of suspicious '
'messages and phishing attempts.',
'references': [{'source': 'Supercell Public Disclosure'}],
'regulatory_compliance': {'regulations_violated': ['EU Cyber Resilience Act'],
'regulatory_notifications': ['Data Protection '
'Ombudsman']},
'response': {'communication_strategy': 'Public disclosure, warnings to '
'affected individuals',
'containment_measures': 'Blocked further access, took the '
'service offline',
'incident_response_plan_activated': True,
'law_enforcement_notified': True},
'stakeholder_advisories': 'Warning to affected individuals about potential '
'phishing or impersonation scams.',
'title': 'Supercell Cyberattack Targeting Internal Meeting Platform',
'type': 'Data Breach'}