Particle.news

Cloud Imperium Reveals January Breach Exposing Basic Account Data After Six Weeks

A delayed, low-profile notice has sparked scrutiny of CIG’s transparency.

Overview

  • Cloud Imperium Games says attackers accessed some backup systems on January 21, obtaining limited account details such as names, contact information, usernames, and dates of birth.
  • The company reports no passwords or payment data were stored on the affected systems, says access was read-only, and says it has seen no signs the data was released publicly.
  • CIG disclosed the incident on March 3 in a website notice that drew criticism from players for being hard to find and for the time taken to inform users.
  • The developer has not said how many users were impacted, and reporters seeking details about potential victim notifications or any ransom demand have not received answers.
  • Security analysts warn that the exposed “basic” data can still fuel phishing or identity attacks, and CIG says it is monitoring systems and assessing for any public data release.