An unknown group in the ransomware scene (if you could call it that) has allegedly stolen nearly 200 GB of sensitive data from Fortnite creator Epic Games and has given a March 4 deadline for a payout.
The initial report came out of CyberDaily, which claims a relatively new ransomware group is behind the attack. The group, called “Mogilevich” allegedly carried out the attack last night, with a spokesperson from the group stating, “We have quietly carried out an attack to [sic] Epic Games’ servers,” claiming that they have a wealth of sensitive data, with “email, passwords, full name, payment information, source code and many other data.”
The data ‘stolen’ from Epic Games is supposedly up for sale, but Mogilevich has not posted any proof that they have the sensitive data they claim to hold. This is unlike previous hacking instances that have happened, the most recent Insomniac Games attack from the group Rhysida, or 2020’s Capcom cyberattack, where they showed proof of sensitive information before posting demands.
Since the ransomware report, Epic Games has released a statement to Eurogamer, with a spokesperson saying, “We are investigating, but there is currently zero evidence that these claims are legitimate,” refuting the data breach. Epic Games has also said they’ve reached out to the Mogilevich group requesting proof, but they have not responded. The ransomware group is allegedly extorting $15,000 from Epic Games, which is a really curious number considering the Fortnite creator is worth over $30 billion, and because the only proof Epic has provided that there is a hack (which is provided in a post below) is this.
While it appears the ransomware group has gone silent, they’ve given Epic a deadline of March 4 to pay up, which includes either Epic themselves or if an outside party wants to buy the data. While there is no proof of any cyberattack thus far, an account password change might help fans feel safer in the meantime, and Epic has given a handy guide to do so here.
