Sony is investigating possible ransomware attack at Insomniac Games

Sony’s investigating a possible ransomware attack at PlayStation subsidiary Insomniac Games, the makers of the beloved Spider-Man series. A hacking group called Rhysida has claimed credit for the alleged incident and announced that it’ll be selling any acquired data for $2 million within seven days if Insomniac and Sony don’t pay up, according to Cyber Daily. This data potentially includes the usual stuff, like internal emails, confidential documents and personal information, but Rhysida says it goes even further. The organization claims it not only stole personal documents related to Spider-Man voice actor Yuri Lowenthal, but images and details regarding that forthcoming Wolverine game. To that end, the group released proof-of-hack documents that suggest it grabbed screenshots from the game, in addition to character art relating to other superheroes that may be featured in the title. Rhysida put up a temporary website to advertise the sale of the documents, urging purchasers to “seize the opportunity to bid on exclusive, unique and impressive data.” It also promises that it only “sells to one hand, no reselling.” Honor among thieves, I guess. Sony has issued a statement on the matter to Video Games Chronicle, writing “we are aware of reports that Insomniac Games has been the victim of a cyber security attack.” The company says it’s “currently investigating this situation” but notes that the alleged attack didn’t spread beyond Insomniac, so other Sony divisions remain unscathed. Insomniac is recently known for Spider-Man, Spider-Man 2 and Spider-Man: Miles Morales, but the company cut its teeth in the 1990s making well-regarded PlayStation platformers like Spyro the Dragon and Ratchet & Clank. The developer’s Wolverine game was revealed back in 2021 and there’s no announced release date.

As for Sony, it’s one of the largest companies in the world, so it tends to attract this kind of thing. The company fell victim to a similar ransomware attack back in October, which exposed the personal information of more than 7,000 employees. In September, a hacking group called Ransomed.vc alleged that it compromised “all” of Sony’s connected systems, but other hackers claimed this was a scam. Sony investigated the alleged attack but hasn’t released any findings.This article originally appeared on Engadget at