September 20, 2021

Volume XI, Number 263

Advertisement

September 20, 2021

Subscribe to Latest Legal News and Analysis

September 17, 2021

Subscribe to Latest Legal News and Analysis

Extortion Doesn’t Work for EA Sports Hackers

According to The Record, Electronic Arts Sports (EA) was the victim of a cyber hacking in June, when hackers posted on an underground hacking forum that they were in possession of EA data seeking a sale price of $28 million. The hackers were reportedly able to access EA’s system after purchasing tools that allowed authentication into an internal Slack communication thread from a dark web marketplace and mimicking a legitimate employee user’s account.

The hackers were then able to download a large amount of source code from the company with the hope of selling it for big money. Unfortunately, they were unable to find a buyer, so they went back to EA asking for payment to prevent the data from being leaked publicly. The hackers released part of the cache of data to prove they had it and to put pressure on EA, allegedly including the source code for the FIFA 21 soccer game.

It has been reported that EA refused to pay the extortion amount, so the entire data set has been leaked online. EA has confirmed that no player data was involved and that it is actively assisting law enforcement with the investigation into the incident.

The incident illustrates how a legitimate internal communication tool can be used against a company through new tools purchased online that leverage employees’ passwords and the ability for hackers to escalate authentication protocols. It is important for employees to refrain from using passwords across different platforms since they are stolen and purchased online to use for nefarious purposes.

Copyright © 2021 Robinson & Cole LLP. All rights reserved.National Law Review, Volume XI, Number 217
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

Linn F. Freedman, Robinson Cole Law Firm, Cybersecurity and Litigation Law Attorney, Providence
Partner

Linn Freedman practices in data privacy and security law, cybersecurity, and complex litigation. She provides guidance on data privacy and cybersecurity compliance to a full range of public and private clients across all industries, such as construction, education, health care, insurance, manufacturing, real estate, utilities and critical infrastructure, marine, and charitable organizations. Linn is a member of the firm's Business Litigation Group and chairs its Data Privacy + Cybersecurity Team. She is also a member of the Financial Services Cyber-Compliance Team (CyFi ...

401-709-3353
Advertisement
Advertisement
Advertisement