Supercell reports internal platform breach, says player data unaffected
Supercell has confirmed that an unauthorized party accessed a platform it uses for company meetings and presentations. The company believes no player data was affected, though names, images, voices, and some user contact details may have been exposed. Supercell has blocked further access, filed a police report, and notified regulators under the EU Cyber Resilience Act and the Data Protection Ombudsman.
Supercell said an unauthorized party reached a system it uses for internal meetings and presentations. The company reported several cyberattacks in the prior week, with one causing this access. It believes player information was not compromised.
After blocking access and taking the service offline, Supercell began a review with security specialists. It also contacted police, submitted an EU Cyber Resilience Act notification, and alerted the Data Protection Ombudsman. Recorded sessions may feature current or former employees, guests, and partners, and may include names, images, voices, and platform users' names and email addresses. The investigation continues.
The breach could mainly affect people connected to Supercell's internal events, including current and former staff, guests, and partners, whose names, images, voices, or contact details may have been exposed. They may face more convincing phishing or impersonation attempts. Players might see scam messages falsely claiming to be from Supercell, even if their game data was not accessed. The incident may also shape how gaming firms and regulators view security around corporate collaboration tools.