Ransomware Gang Claims It Has Stolen 189 GB of Data From Fortnite Maker Epic Games

It seems like developer's data getting breached by ransomware groups has become quite common. After a massive data breach at Insomniac Games, it seems like Epic Games is the latest victim. As reported by CyberDaily, a ransomware group by the name of 'Mogilevich' has claimed to have successfully hacked Epic Games.

Epic Games Allegedly Hacked by Ransomware Group

Mogilevich claims that they carried out a stealthy attack on Epic Games servers. The gang claims to have 189 GB of data, including "email, passwords, full name, payment information, source code." The group has put the information up for sale per the message on the website. It also includes a hyperlink stating, "If you are an employee of the company or someone who would like to buy the data, click on me. "

The deadline for Epic Games to pay or for someone to purchase the data outright is 4th March 2024. However, the gang hasn’t mentioned any figure for the data’s selling price nor revealed any proof of the hacked material, as Rhysida did with the Insomniac Hack.

Mogilevich is a relatively new extortion group that has claimed to breach numerous organizations, including Infinity USA and Ireland's Department of Foreign Affairs. However, unlike other groups, Mogilevich doesn't share samples of stolen data and claims only to be selling data directly to proven buyers. The ransomware gang is possibly Russian-speaking and, so far, is operating independently and advertising itself as a ransomware-for-hire operation.

What is Epic Games Saying?

Epic Games has officially denied the claims that they've suffered from a ransomware hack. The company hasn't heard from the hackers and investigated the claim within a few minutes of its post to the dark web. 

"There is zero evidence right now that the ransomware claims from Mogilevich are legitimate. Mogilevich has not contacted Epic or provided any proof of the veracity of allegations."

It's unclear if Mogilevich has claimed to hack Epic Games for clout or if the data leak is verified and real. According to Infosec expert and cybersecurity analyst Dominic Alvericic, the breach is false, as there's still no proof of the group hacking Epic Games. 

Lawrence Abrams, a ransomware expert, posted on X that Mogilevich's claims of breach "doesn't feel real." The group told Abrams that they were selling the data for $15,0000 USD but would only provide proof of the breach if they intended to purchase in addition to proof of funds available.