Razer investigated claims that Razer Gold data and source code were stolen
- Organization
- Razer
- Exploit
- Hacking
- Industry
- Consumer Electronics
Razer, the gaming hardware and services company, said it was alerted on July 9, 2023 to a potential hack affecting Razer Gold, its virtual gaming credits marketplace, after someone advertised what they described as stolen Razer data on a criminal forum.
The seller, using the alias "Nationalist", claimed to hold source code, databases, encryption keys and backend access logins for razer.com, the company's main website. Screenshots offered as proof showed file listings and directory trees, email addresses, source code said to relate to anti-cheat and rewards systems, API details and Razer Gold balances. Cyber Daily reported the seller claimed to have email addresses for around 404,000 Razer Gold account holders with active credit balances. BleepingComputer said the sample data appeared to date from at least December 2022 and that the accounts it checked belonged to real users of the platform.
The asking price was 100,000 US dollars in Monero, a cryptocurrency favoured for its resistance to transaction tracing.
Razer said that on learning of the claim it conducted a thorough review of all its websites and took steps to secure its platforms. It invalidated active user sessions and required members to reset their passwords. The company said it would report the matter to the relevant authorities once its investigation concluded.