Gaming firm Razer hit by potential hack, stolen data offered for US$100,000 in crypto

Gaming hardware company Razer has suffered a potential hack impacting Razer Gold, its virtual gaming credits system, according to a statement by the company when MARKETING-INTERACTIVE reached out.

According to The Straits Times, a seller on a hacker forum is offering the stolen data for US$100,000 in cryptocurrency and that this includes source code and back-end access logins for Razer's website and its products.

Don't miss: 'Financial data not compromised,' says Goldheart after leak affects over 40,000 customers

"We were alerted to a potential hack on 9 July 2023, impacting Razer Gold," said Razer in a statement. "Upon learning about the breach, the team immediately conducted a thorough review of all Razer websites and have taken all necessary steps to secure our platforms."

It noted that Razer is still in the midst of investigations, and it remains committed to ensuring the digital safety and security of all its customers.

"Once investigations have concluded, Razer anticipates that we will report this matter to the relevant authorities," it said. 

According to The Straits Times, the data being sold included the source code as well as back-end access logins the gaming company’s website and products. This includes folders labelled zVault, which is Razer’s digital wallet that had launched in March 2017 and later was replaced by Razer Gold in December 2018, the stolen files also included other folders which contained encryption keys and files pertaining to its reward system.

According to Twitter account FalconFeedsio which posted a screengrab of the hackers’ forum, the seller stated that he would sell data to only one customer for the price of US100,000 in the Monero cryptocurrency. However, he added that he would be open to offers which are lower than the stipulated amount. The Monero cryptocurrency allows for more private transactions, potentially allowing the seller to maintain privacy.

Earlier this year, jewellery brand Goldheart fell victim to a hacker targeting its eCommerce website where the personal information of over 40,000 of its customers had been compromised. 

It noted that on 24 May, it discovered that its eCommerce website had been compromised due to illegal access. "Our dedicated team immediately launched a thorough investigation and discovered that personal information of close to 42,000 customers had been compromised," it said before noting that it can confirm from its investigation that personal information from November 2022 onwards was not compromised.

"We took immediate steps to mitigate any further illegal access by suspending our eCommerce website, securing our systems, and working with cyber security experts and relevant authorities," it continued. "Our top priority is to protect the data of our customers and prevent any further unauthorised access."

Related articles:
'Financial data not compromised,' says Goldheart after leak affects over 40,000 customers
Lazada to reward ethical hackers up to US$10k in new public bounty initiative
Forever 21 confirms hackers breached payment card information for 7 months