{"id":23153,"date":"2023-10-17T11:10:25","date_gmt":"2023-10-17T19:10:25","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2023\/10\/17\/news-16883\/"},"modified":"2023-10-17T11:10:25","modified_gmt":"2023-10-17T19:10:25","slug":"news-16883","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2023\/10\/17\/news-16883\/","title":{"rendered":"Customer data stolen from gaming cloud host Shadow"},"content":{"rendered":"

Cloud infrastructure provider Shadow has warned of the data theft of over 500,000 customers. The customers were informed by a breach notification which was posted online<\/a>.<\/p>\n

Cloud is known in the gaming world and, among other things, allows gamers to play resource heavy games on lower-end devices,<\/p>\n

The stolen data includes full customer names, email addresses, dates of birth, billing addresses, and credit card expiration dates. According to Shadow, no passwords or sensitive banking data have been compromised.<\/p>\n

Shadow says the incident happened at the end of September, and was the result of a social engineering attack on a Shadow employee. The attack began on the Discord platform after the employee downloaded malware he believed to be a game on the Steam platform.<\/p>\n

Shadow says that despite swift countermeasures, the attackers were able to use one or more of the cookies they had stolen in order to connect to the management interface of one of Shadow’s SaaS providers. From there the attackers were able to steal the data from Shadow by using their Application Programming Interface (API) access.<\/p>\n

According to BleepingComputer<\/a>, a cybercriminal claiming responsibility for the attack is selling the stolen database on a well-known hacking forum.<\/p>\n

\"message<\/p>\n

image courtesy of BleepingComputer<\/em><\/p>\n

In the message, the cybercriminal says IP connection logs were also stolen in the breach in addition to the other data mentioned by Shadow.<\/p>\n

It is unclear, although likely, whether Shadow has reached out to everyone involved. Shadow recommends that users set up multi-factor authentication (MFA)<\/a> on their accounts, and watch out for any emails that appear to come from Shadow, as they could be phishing attempts.<\/p>\n

The company is also telling users to contact customer service<\/a> with any questions or concerns.<\/p>\n

Data breach<\/h2>\n

There are some actions you can take if you are, or suspect you may have been, the victim of a data breach.<\/p>\n