Gaming firm Razer hit by potential breach, hacker offering stolen data for RM466,750 in crypto


Razer said that it is aware of the potential breach and is investigating. — The Straits Times/ANN

SINGAPORE: Gaming hardware company Razer has allegedly suffered a data breach, after a seller on a hackers’ forum offered stolen data for US$100,000 (RM466,750 or S$134,898) in cryptocurrency on July 8.

The firm said in a Twitter post on Monday that it is aware of a potential breach and is investigating.

Checks by The Straits Times found that the data being sold included the source code and back-end access logins for Razer’s website and its products.

This included folders labelled zVault – referring to Razer’s digital wallet that was launched in March 2017 and later gave way to Razer Gold in December 2018 – as well as those allegedly containing encryption keys and files pertaining to its reward system.

A sample seen by ST also showed the alleged e-mail addresses of customers with virtual credit in Razer Gold accounts. The seller claimed to have 404,000 accounts, but this could not be verified.

On the hackers’ forum, the seller said he would sell the data to only one customer for an asking price of US$100,000 (RM466,750) in the Monero cryptocurrency.

However, he added that he would be open to offers lower than the stipulated amount.

Unlike other cryptocurrencies such as Bitcoin or Ethereum, in which information on transactions is public due to them taking place on the blockchain, transactions on Monero are private, according to the cryptocurrency’s website.

Users of the cryptocurrency are anonymous by default, and information on transactions are concealed, making it harder to see which wallet sent or received the money.

ST has contacted Razer for more information, including whether customers’ personal information, such as their credit card details, was stolen, and if this data breach was linked to the one the home-grown firm suffered in 2020.

In the earlier breach, the personal and shipping information of about 100,000 Razer customers globally was leaked due to a server misconfiguration.

Razer sued its IT vendor Capgemini for the security breach, after a former employee at the latter firm added a “#” command to a line of code, disabling the security settings of a computer system.

As a result, data stored in the system was leaked to the public between June 18, 2020, and Sept 10, 2020. The High Court awarded Razer US$6.5mil in damages on Dec 9, 2022. – The Straits Times (Singapore)/Asia News Network

Follow us on our official WhatsApp channel for breaking news alerts and key updates!
   

Next In Tech News

Shanghai AI startup founded by ex-Microsoft engineers bets on ‘scaling law’ to boost AI capabilities
Almost half of US Dell employees would rather work from home than get promoted
Should young kids have smartphones? These parents in Europe linked arms and said no
Titan disaster forces global rethinking of deep sea exploration
US bans Russia’s Kaspersky antivirus software
Analysis-Nvidia’s staggering gains leave investors wondering whether to cash in or buy more
Opinion: It’s starting to look like using smartphones in schools will be the new smoking in the bathroom
Tinder, Bumble, and Hinge have turned into a ‘wasteland’ for Gen Z and millennials – and now many are breaking up with dating apps for good
So long plastic air pillows: Amazon shifting to recycled paper filling for packages in North America
Biden bans US sales of Kaspersky software over Russia ties

Others Also Read