StarCitizen:January 2026 data breach: Difference between revisions

Latest revision as of 11:15, 24 July 2026

The January 2026 leak was due to StarCitizen:Cloud Imperium Games being targeted by a systematic and sophisticated attack, resulting in unauthorized access to some backup systems, including limited access to metadata, contact details, username, date of birth, and name.<ref name=":0">"On 21 January 2026, CIG was targeted by a systematic and sophisticated attack [...]", notice on the RSI website, 2026-03-02, deleted since by CIG, no archive, quoted in some news articles</ref>

Website notice from CIG

Template:Hatnote "On 21 January 2026, CIG was targeted by a systematic and sophisticated attack, resulting in unauthorised access to some backup systems, including limited access to users’ personal data. CIG acted quickly to contain the activity and block further access to this data and CIG systems, and we have refreshed security settings to ensure that there is no threat to our games or our users.

While CIG is still monitoring the situation, we do not consider that the incident poses a risk to the safety of our users. The data impacted relates only to basic account details (i.e. metadata, contact details, username, date of birth, and name). No financial or payment information was stored in the affected systems and was not accessible. No passwords were impacted, and the access was read-only. No data-injection or modification occurred.

We are closely monitoring the situation and our systems to ensure that no further incidents occur. We are also taking steps to assess and detect whether any data that was accessed is released publicly. At this stage, there are no indications of any such activity. We are sharing this update in the interests of transparency. However, we do not anticipate that this incident will have any impact on our users."<ref>Star Citizen studio suffered a data breach in January, and some players aren't happy with the very quiet disclosure that only happened this week, pcgamer.com, 3 March 2026, quoting the website notice that CIG has since deleted</ref><ref name=":0" />

Criticism

CIG has been criticized by players for downplaying the risks associated the leak of data such as contact details, name and date of birth that can be used for targeted phishing and scams, and it has been criticized for only sharing information about the leak at the beginning of March.<ref>CIG suffered small data breach it seems 2 months ago, r/starcitizen, reddit, 2026-03-02</ref><ref>Template:Cite RSI</ref>

External links

haveibeenpwned

References

@@ Line 1: / Line 1: @@
-The '''January 202 leak''' was due to [[StarCitizen:Cloud Imperium Games]] being targeted by a systematic and sophisticated attack, resulting in unauthorized access to some backup systems, including limited access to metadata, contact details, username, date of birth, and name.<ref name=":0">{{Cite RSI|url=https://robertsspaceindustries.com/en/Website-Notice|text=On 21 January 2026, CIG was targeted by a systematic and sophisticated attack [...]|accessdate=2026-03-02}}</ref>
+The '''January 2026 leak''' was due to [[StarCitizen:Cloud Imperium Games]] being targeted by a systematic and sophisticated attack, resulting in unauthorized access to some backup systems, including limited access to metadata, contact details, username, date of birth, and name.<ref name=":0">"On 21 January 2026, CIG was targeted by a systematic and sophisticated attack [...]", notice on the RSI website, 2026-03-02, [https://robertsspaceindustries.com/en/Website-Notice deleted since by CIG], no archive, quoted in some news articles</ref>
-No financial or payment information was stored in the affected systems and was not accessible. No passwords were impacted, and the access was read-only. No data-injection or modification occurred.<ref name=":0" />
+== Website notice from CIG ==
+{{Template:Hatnote|'''Note:'''
+The website notice has since been deleted by CIG.}}
+"On 21 January 2026, CIG was targeted by a systematic and sophisticated attack, resulting in unauthorised access to some backup systems, including limited access to users’ personal data. CIG acted quickly to contain the activity and block further access to this data and CIG systems, and we have refreshed security settings to ensure that there is no threat to our games or our users.
-CIG contained the activity and blocked further access to this data and CIG systems, and refreshed security settings to ensure that there is no threat to the games or users, while also taking steps to assess and detect whether any data that was accessed is released publicly. At the time, with no indications of any such activity.<ref name=":0" />
+While CIG is still monitoring the situation, we do not consider that the incident poses a risk to the safety of our users. The data impacted relates only to basic account details (i.e. metadata, contact details, username, date of birth, and name). No financial or payment information was stored in the affected systems and was not accessible. No passwords were impacted, and the access was read-only. No data-injection or modification occurred.
+We are closely monitoring the situation and our systems to ensure that no further incidents occur. We are also taking steps to assess and detect whether any data that was accessed is released publicly. At this stage, there are no indications of any such activity. We are sharing this update in the interests of transparency. However, we do not anticipate that this incident will have any impact on our users."<ref>[https://www.pcgamer.com/games/sim/star-citizen-studio-suffered-a-data-breach-in-january-and-some-players-arent-happy-with-the-very-quiet-disclosure-that-only-happened-this-week/ Star Citizen studio suffered a data breach in January, and some players aren't happy with the very quiet disclosure that only happened this week], pcgamer.com, 3 March 2026, quoting the website notice that CIG has since deleted</ref><ref name=":0" />
 == Criticism ==