Hackers leak Activision employee data on a hacking forum

The data, allegedly stolen from American gaming giant Activision in a security breach in December 2022, has been leaked on a cybercrime forum.

In a post published on a hacking forum, the threat actors claimed to have obtained 19,444 unique records from an Activision Azure database, and the data is offered freely to all forum members in a text file.

The leaked data contains names, job titles, phone numbers, locations, and email addresses of Activision employees. The forum post was first spotted by the threat intelligence platform FalconFeedsio, which reported the potential data leak on Twitter.

Activision disclosed the breach on February 21, 2023, adding that the incident occurred in December. According to the company, threat actors obtained the credentials of an HR employee through a smishing attack (SMS-based phishing).

A company spokesperson said that the company’s information security team swiftly addressed an SMS phishing attempt on December 4 and quickly resolved it. A thorough investigation determined that no sensitive employee data, game code, or player data was accessed.