Just shortly before Summer Games Fest began, Electronic Arts confirmed to a reporter at Vice that the company had been recently hacked, with an unidentified person or group stealing about 780GB of data from the publisher. The hacker responsible then took to a webforum, listing the contents of the data breach for sale, including the source code for FIFA 21, FIFA 22's debug tools, the entire source code for EA's Frostbite engine, certain private SDK and API keys, and more.

We sell the FIFA 21 full src code and tools

debug tools, SDK And api keys
FIFA 21 matchmaking server
FIFA 22 api keys and some SDK & debugging tools
FrostBite src code & debug tools
Many proprietary EA games frameworks & SDKs
XBOX & SONY private SDK & api key
XB PS & EA pfx & crt with key (currently used)

You have full capability of exploiting on all ea services

Total dump = 780 GB

The breach apparently took place on June 6th, and utilized some form of "intrusion into [EA's| network". According to them, no data related to their customers or players was accessed or is at risk. They're also currently working with the Presque Isle Police Department in order to find out the person responsible. This is the continuation of a streak of data breaches affecting major game publishers, with Nintendo, Capcom, and most recently, CD Projekt Red all falling victim to them.

An amount of game source code and related tools were stolen. No player data was accessed, and we have no reason to believe there is any risk to player privacy. Following the incident, we’ve already made security improvements and do not expect an impact on our games or our business. We are actively working with law enforcement officials and other experts as part of this ongoing criminal investigation.

Source

 

[driverdis]

One of these days, hackers will catch on that the keys from Nintendo,Sony, and Microsoft for signing executables as genuine will be what everyone wants. The Xbox One is the only system other than PS5 to not have any CFW or backup game support even on old firmwares.

 

[Deleted member 475203]

--------------------- MERGED ---------------------------

Honestly i don't understand why they store important data on online capable computer.
Even a fool knows it should be an offline thing.

they (gaming companies) are stupid AF.

 

[codezer0]

One of these days, hackers will catch on that the keys from Nintendo,Sony, and Microsoft for signing executables as genuine will be what everyone wants. The Xbox One is the only system other than PS5 to not have any CFW or backup game support even on old firmwares.

At least to Microsoft's credit, all you really need to run unsigned code on an Xbox One, is a $20 payment to add dev privileges onto your XBL account. After that, you can sideload whatever you wanna run onto any Xbox One you're logged into.

 

[Jayro]

My question is, why are dev studios dumb enough to have their stuff online to begin with? If I was a game dev studio, none of the development machines would have internet access in the first place. The game files would be on a central intranet server, also offline. The ones that keep their game files online are just asking for it.

 

[Foxi4]

Not sure if this was reported yet, but apparently the intrusion was a result of social engineering and not a network exploit. The "hackers" tricked an IT support employee over Slack into allowing them to use their authenticator, pretending that they "lost their phone during a party" and as such they had no access to EA's internal 2FA. The employee supplied them with a token, and upon receiving it the hackers logged on, downloaded everything they could lay their hands on and hightailed off the scene. This once again proves that the weakest link of any network is still the human.

https://www.vice.com/en/article/7kvkqb/how-ea-games-was-hacked-slack

 

[almmiron]

Very Good news. Cheers to the hackers.

 

[Jayro]

One of these days, hackers will catch on that the keys from Nintendo,Sony, and Microsoft for signing executables as genuine will be what everyone wants. The Xbox One is the only system other than PS5 to not have any CFW or backup game support even on old firmwares.

You know... I've always wondered why the keys can't be derived from comparing enough signed files. Yeah, the keys are encrypted, but they use the same hash every time. You'd think that would be a pretty easy win.

 

[BeastMode6]

No Skate source? No source from when EA sports was actually good (2004ish era)? Who the hell wants the FIFA 21 source code?

What the hell was the point of this?

 

[chrisrlink]

No Skate source? No source from when EA sports was actually good (2004ish era)? Who the hell wants the FIFA 21 source code?

What the hell was the point of this?

1. for the lulz
2 the api codes
is this what russian hackers do in the off season?

 

[Tiger21820]

The hackers REALLY should have also deleted the original data from EA after downloading it! That REALLY would have ruined their day! Talk about missed opportunities...

But still, it gets us one step closer to putting EA out of business! I really think that hackers should have deleted the data from the source after downloading it!

These hackers are heroes!

 

[Bladexdsl]

it's funny when it happens to someone who deserves it. that'll teach you to unleash that plague called loot boxes onto the world EA

 

[JaNDeRPeiCH]

Maybe it’s revenge from Nintendo gamers for not putting key franchises on their console. Seriously give the Big N some love.

In this case for EA,Karma is the sweet vengeance for being anticonsumer gaming company and will gladly see their tears of fear.

 

[64bitmodels]

this disappoints me. Only a hack? why didnt someone bomb the entire company?

 

[codezer0]

You know... I've always wondered why the keys can't be derived from comparing enough signed files. Yeah, the keys are encrypted, but they use the same hash every time. You'd think that would be a pretty easy win.

In theory, the signing should be randomized as well. It was Sony's famous blunder where their package signing was with one of the unknowns being the same variable every time regarding PS3 and PSP games.

 

[Deleted member 668561]

At least to Microsoft's credit, all you really need to run unsigned code on an Xbox One, is a $20 payment to add dev privileges onto your XBL account. After that, you can sideload whatever you wanna run onto any Xbox One you're logged into.

Where full hardware access/control?

 

[Jayro]

The hackers REALLY should have also deleted the original data from EA after downloading it! That REALLY would have ruined their day! Talk about missed opportunities...

But still, it gets us one step closer to putting EA out of business! I really think that hackers should have deleted the data from the source after downloading it!

These hackers are heroes!

Yeah, imagine someone deletes their entire frostbite engine, and they're forced to either reverse-engineer it out of a compiled game, or start fresh again. Either way would be rough.

 

[CMDreamer]

With that Fifa source code, now anyone interested and with the ability to do so, can create more bad sports games... Just what "we" needed!

Nicely done EA, nicely done...

 

[HarveyHouston]

Ouch! EA is a pretty big company - I wonder what else was leaked that they don't want us to know about?

 

[Foxi4]

Nearly everybody in this thread is a big dumb-dumb who should be ashamed of themselves. Corporations are not people - they're considered "people" in the legal sense, but in reality, they're *made out of people*.

Do you think a lowly IT tech support guy at the bottom of the ladder gets any kaching because EA executives choose to monetise games via microtransactions? Do you think that EA's army of developers, including programmers, artists, writers, sound engineers and other industry experts *choose* to sell their work piecemeal because they want a second yacht for Christmas? Do you think this kind of intrusion will "teach" the corporation anything at all, that "this'll show'em"? No, those kinds of decisions are made in boardrooms by chairmen who do not care about your experience playing EA products, they care about sales.

The people affected by this leak are not the people who stuff their pillows with money, they're the people who exchange blood, sweat and a fair bit of sleep crunching to provide you with entertainment, and as of late, they've been providing a lot of it with hits like Apex Legends, Jedi: Fallen Order, Squadrons and even more innovative titles like It Takes Two. No high level executive will feel a substantial impact of this event, but a few low-level employees will get the sack - some rightfully so, some not so much.

The "boo hoo EA bad" meme is a cringe opinion. Vote with your wallet, by all means - if you're against microtransactions, don't buy crappy downloadable content or lootboxes. With that being said, cheering on as a company that employs droves of industry experts gets their data stolen makes you look supremely dumb.

It's as if you were cheering on a Wal-Mart getting looted because big company bad, blissfully unaware of the fact that the Wal-Mart corporation likely has a sophisticated insurance policy and incurs minimal losses. You know who that kind of thing does harm? The minimum wage employees that no longer have a workplace to return to until the store is renovated and new stock arrives, if the location reopens at all.

Good job, you really are at the forefront of the revolution, congrats.

 

[MamaLuigiS]

Nearly everybody in this thread is a big dumb-dumb who should be ashamed of themselves. Corporations are not people - they're considered "people" in the legal sense, but in reality, they're *made out of people*.

Do you think a lowly IT tech support guy at the bottom of the ladder gets any kaching because EA executives choose to monetise games via microtransactions? Do you think that EA's army of developers, including programmers, artists, writers, sound engineers and other industry experts *choose* to sell their work piecemeal because they want a second yacht for Christmas? Do you think this kind of intrusion will "teach" the corporation anything at all, that "this'll show'em"? No, those kinds of decisions are made in boardrooms by chairmen who do not care about your experience playing EA products, they care about sales.

The people affected by this leak are not the people who stuff their pillows with money, they're the people who exchange blood, sweat and a fair bit of sleep crunching to provide you with entertainment, and as of late, they've been providing a lot of it with hits like Apex Legends, Jedi: Fallen Order, Squadrons and even more innovative titles like It Takes Two. No high level executive will feel a substantial impact of this event, but a few low-level employees will get the sack - some rightfully so, some not so much.

The "boo hoo EA bad" meme is a cringe opinion. Vote with your wallet, by all means - if you're against microtransactions, don't buy crappy downloadable content or lootboxes. With that being said, cheering on as a company that employs droves of industry experts gets their data stolen makes you look supremely dumb.

It's as if you were cheering on a Wal-Mart getting looted because big company bad, blissfully unaware of the fact that the Wal-Mart corporation likely has a sophisticated insurance policy and incurs minimal losses. You know who that kind of thing does harm? The minimum wage employees that no longer have a workplace to return to until the store is renovated and new stock arrives, if the location reopens at all.

Good job, you really are at the forefront of the revolution, congrats.

EA Bad lol