EightPixelsSquare Listed by medusa Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 25 January 2023, the UK game-development studio EightPixelsSquare was listed by the ransomware group known as medusa. Public reporting states that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and further operational details have not been disclosed.

The listing itself is a claim published by the group. For players, partners and staff connected to a studio whose games reach tens of millions of users, any confirmed exposure of internal material carries practical consequences that warrant clear, factual attention.

Inside the incident

According to the available record, EightPixelsSquare appeared on medusa’s leak site on or around 25 January 2023. The sole concrete description of the compromise is that internal files were allegedly exfiltrated during a ransomware attack. No public figure has been given for the volume of data taken, the precise date the intrusion began, the initial access method, or whether encryption of systems also occurred. The number of individuals whose information may have been involved is listed as unknown. Beyond the group’s claim and the characterisation of the material as internal files, independent confirmation of the full scope has not been published in the source material.

Who is medusa?

Medusa is a ransomware operation that has been active in the cyber-criminal ecosystem for several years. Like many contemporary groups, it commonly employs a double-extortion model: after gaining access to a network, operators exfiltrate data and then threaten to publish it on a dedicated leak site if a ransom is not paid. The group has previously listed organisations across multiple sectors, using the public naming of victims as leverage. Its leak-site postings are claims made by the actors themselves; they do not automatically constitute independent verification that every asserted detail is accurate. In this case, the record simply notes that EightPixelsSquare was listed and that internal files were described as having been taken.

About EightPixelsSquare

EightPixelsSquare is a game-development studio founded in December 2012 and based in Derby, United Kingdom. Public descriptions state that it employs a team of approximately 45 experienced developers and that its catalogue of titles on iOS and Android has been enjoyed by more than 30 million players worldwide. Studios of this type typically maintain source code, build systems, analytics, player-support records, commercial contracts, and internal administrative documents. Because the company sits at the intersection of consumer entertainment and digital distribution, a breach affecting its internal systems can touch both corporate operations and the wider player community that relies on its products.

What data was at risk

The facts name the exposed material only as “internal files exfiltrated in a ransomware attack.” No itemised inventory—such as customer databases, authentication credentials, source-code repositories, financial records, or employee information—has been published in the available reporting. Organisations in the mobile-games sector ordinarily hold a mixture of proprietary code, telemetry, support tickets, payment-related metadata, and staff or contractor details. Whether any of those categories were among the files taken in this incident remains unconfirmed. Readers should treat the precise contents as undisclosed until verified by the company or by independent analysis.

The real-world impact

For individuals, the principal risks associated with an internal-file exfiltration are secondary misuse of any personal or contact data that may have been present, targeted phishing that references the studio or its games, and credential-stuffing attempts if login information was stored in the taken material. Because the scale and exact data types are unknown, it is not possible to quantify how many people face elevated exposure. For the studio itself, consequences can include operational disruption, the cost of incident response and system hardening, potential contractual or regulatory notifications, and reputational questions from players and partners. None of these outcomes are asserted here as proven facts specific to this case; they are the ordinary categories of harm that follow ransomware incidents involving internal corporate data.

If your data was in this claimed breach

If you have an account, employment relationship, or other connection with EightPixelsSquare, treat the possibility of exposure seriously even while details remain limited. Change passwords on any related accounts and enable multi-factor authentication where it is offered. Monitor financial and email accounts for unexpected activity, and be cautious of unsolicited messages that claim to come from the studio or reference its games. Consider placing fraud alerts with relevant credit-monitoring services if you believe sensitive personal information may have been involved. You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets. Keep records of any suspicious contact and report confirmed fraud to the appropriate authorities.

AICompiled with AI assistance from public sources and published under our editorial standards.