Activision Employees Learned Their Data Was Hacked from Twitter

gamerant.com:

Activision failed to disclose a data breach that compromised employee information to its affected staffers, who only learned about the incident from Twitter months after the fact. The social media report detailing the hack also contained evidence suggesting Activision's 2023 plans for Call of Duty have been leaked.

Cybersecurity research group vx-underground previously reported that a high-ranking Activision official fell victim to an SMS-based phishing attack on December 4, 2023. After gaining access to her Slack account, the hackers managed to download a number of internal documents revealing an incomplete 2023 roadmap for Call of Duty games. The victim realized what has transpired after the attackers used her account to post an inflammatory message to one of the company's Slack channels, presumably after already stealing all of the internal data they could get their hands on, including employee contact information.

Call of Duty Account Hack Screenshot Shares Troubling Possibilities For The Game's Community

While Activision did not disclose the breach publicly, it also failed to do so internally, TechCrunch reports, citing anonymous accounts from two current staffers, one of whom described the situation as problematic, positing that the company should have notified any employees whose data was compromised. According to the original report detailing the attack, this lack of communication was actually a two-way issue; the Activision official who fell for the scam was not the only staffer targeted by the attackers, but those who correctly identified malicious SMS messages as phishing attempts also failed to report them to the company's security team. While there's no guarantee this would have prevented the data breach, it