Security News > 2023 > October > 530K people's info feared stolen from cloud PC gaming biz Shadow

Shadow, which hosts Windows PC gaming in the cloud among other services, has confirmed criminals stole a database containing customer data following a social-engineering attack against one of its employees.

Customers can also access remote PC instances for development work and other tasks as well as cloud storage.

The Shadow rep did confirm that an email to customers alerting them to the information theft, shared with The Register by readers and posted on Reddit, is legitimate, and gave us a statement from Sele, noting "We will not comment further."

According to Sele's missive, Shadow was the "Victim of a social engineering attack which led to the exfiltration of the database of one of our service providers, resulting in the unauthorized exposure of certain customer data."

In the alert emailed to Shadow customers, Sele provided more details about what happened in the social engineering attack, and said it took place in late September.

On Monday, a crook listed for sale what they claimed to be an 879 MB Shadow database with details on 533,624 customers.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/10/13/shadow_data_theft/