top of page

Insomniac Games Cyberattack: Fortifying Data Security in Gaming

Insomniac Games, known for titles like Spider-Man and Ratchet & Clank, got hit by a devastating cyber attack. An info leak of this magnitude immediately spurred discussions about internal security throughout the industry. This attack isn’t just about lost data; it led to industry-wide personal safety concerns, highlighting just how threatening compromised data can be.

Image: Insomniac Games / Elemental Computing Inc.

Description of the Cyberattack

The assailants, identified as the ransomware group Rhysida, executed a calculated phishing attack targeting Insomniac Games. Their demand for a staggering $2 million payment in Bitcoin stood as a menacing ultimatum. When Insomniac Games declined to comply, Rhysida unleashed a torrent of leaked data, including confidential employee information and a trove of unreleased game files.

The fallout from this breach cannot be overstated. Internal communications, sensitive personal assets of Insomniac workers, and files linked to a highly anticipated "Wolverine" game collaboration with Marvel were unceremoniously spilled into the public domain. Such premature disclosures not only pose severe security risks but also cast shadows of uncertainty on the company’s future, leading to potential harassment concerns for its members.

The gravity of this breach extends beyond compromised data. It's a clarion call for the gaming industry, highlighting vulnerabilities that must be urgently addressed to safeguard against similar threats.

Importance of Data Security Measures

At Elemental Computing, Inc. (ECI), we underline the criticality of robust data security measures, especially in the wake of such alarming cyber incidents. The Insomniac breach underscores the paramount importance of data security protocols. We follow HIPAA compliance, industry best practices regarding vendor and employee security, and protection of individuals’ sensitive information.

Moreover, the individuals entrusted with managing sensitive databases must be seasoned industry professionals adept at navigating the treacherous terrain of phishing and malware threats. This isn't merely about technology; it's about ensuring that the human element in data management possesses the expertise necessary to thwart sophisticated cyberattacks. Investing in skilled professionals not only fortifies defenses but also elevates proactive measures against potential breaches.

At ECI, we champion these principles, advocating for a multifaceted approach to data security that extends beyond mere technological solutions. The focus lies in cultivating a culture of vigilance and expertise, where the guardians of sensitive information are equipped to combat evolving threats effectively.

Lessons Learned and Recommendations

The profound repercussions of the breach at Insomniac Games serve as a poignant lesson for the gaming industry. This breach unveiled vulnerabilities that demand immediate attention and proactive measures to fortify cybersecurity protocols.

Recommendations for gaming companies emerge from this harrowing incident. Adhering to accepted best practices across all parties is the first line of defense against phishing and data breaches. Simultaneously, investing in seasoned professionals who possess a wealth of experience in navigating the intricate landscapes of cybersecurity is paramount.

The focus should not solely be on reacting to threats but on regularly updated and improved defenses. Elevating cybersecurity from a reactive approach to a proactive stance involves continuous education, stringent protocols, and a cohesive strategy.


The major setback at Insomniac Games is a warning about how exposed any company wide information in the gaming world can be. It shows that the way games protect key assets online isn't always safe. Now, it’s really important for gaming companies to learn from this and improve their internal and external practices. They need to check how they keep info safe, make it stronger, and get experts who know a lot about stopping online problems. It’s a chance to make things safer for everyone who loves games and their creation the way we do.

At Elemental Computing, Inc., we remain resolute in our commitment to championing robust data security measures. Together, let us bolster the industry's defenses and forge a resilient future that safeguards invaluable data assets.

40 views0 comments


bottom of page