Bandai Namco confirms hack by ransomware group; confidential information stolen
Bandai Namco, a name the fighting game community knows well thanks to titles like Tekken, Dragon Ball FighterZ, and Soul Calibur, has confirmed that they've been hacked and had confidential information stolen by ransomware group ALPHV.
First wind of this reached public ears back on Monday when vx-underground, which proclaims to be the largest collection of malware source code, samples, and papers on the internet, posted the news on Twitter. Bandai has since confirmed the hack with Video Game Chronicle and replied with statements on the situation.
ALPHV ransomware group (alternatively referred to as BlackCat ransomware group) claims to have ransomed Bandai Namco.
— vx-underground (@vxunderground) July 11, 2022
Bandai Namco is an international video game publisher. Bandai Namco video game franchises include Ace Combat, Dark Souls, Dragon Ball*, Soulcaliber, and more. pic.twitter.com/hxZ6N2kSxl
"On July 3, 2022, Bandai Namco Holdings Inc. confirmed that it experienced an unauthorized access by third party to the internal systems of several Group companies in Asian regions (excluding Japan)," says Bandai to VCC. "After we confirmed the unauthorized access, we have taken measures such as blocking access to the servers to prevent the damage from spreading."
They go on to note that it is possible that customer information related to the Toys and Hobby Business in Asian regions could have been on the aforementioned servers, and that they're doing all they can to quickly realize the full scope of and minimize the damage done by the attack.
Video game developers have been no strangers to ransomware attacks in recent times as we recall Capcom's 2020 cyber assault from Ragnar Locker as well as CD Projekt Red's reported 2021 attack at the hands of a group called HelloKitty.
Ransomware is a malware designed to deny a user or organization access to files on their computer. Hackers will often use said malware to encrypt a target's files, essentially denying access to them.
The hackers will then demand a ransom from the target in exchange for decryption and/or to regain access to their files, often threatening to release sensitive information contained on said files to the public otherwise.
