EightPixelsSquare Listed by Medusa Ransomware Group

On January 25, 2023, UK mobile-game developer EightPixelsSquare appeared on the leak site of the Medusa ransomware group. The listing states that internal files were exfiltrated during a ransomware attack; the exact number of people whose data may be exposed remains unknown.

Details in the Medusa Listing

The Medusa leak site, mirrored on ransomware.live, states that EightPixelsSquare data was published after the company did not meet the group’s demands. The disclosure indicates that internal files were taken but does not specify the volume of records, the precise data types, or the systems that were initially compromised. Public reporting on Medusa’s past postings shows that such listings typically include employee records, contracts, financial documents, and source-code repositories once the countdown expires. The notification does not quantify affected records, so the true scale of personal information at risk cannot be stated with certainty.

Why This Matters for You and Your Family

When a game studio’s internal files leave its network, the information inside often contains names, email addresses, phone numbers, and sometimes payment details tied to players or staff. If your email or phone appears in those files, it can be sold or published alongside other records from earlier breaches. Over 30 million players have downloaded EightPixelsSquare titles on iOS and Android; any overlap between player accounts and the stolen internal files creates a direct link between your gaming identity and real-world contact information. For families this means children’s usernames, parent email addresses, and household details can surface together, increasing the chance of targeted scams or account takeovers.

The Doxxing and Identity-Chain Risk

Ransomware operators rarely stop at one dataset. Once internal files are public, threat actors combine them with credential leaks, forum posts, and data-broker records to build complete identity chains. A single email from the EightPixelsSquare files can be matched to your child’s gaming account, your reused password on another service, and your home address pulled from public records. These chains enable doxxing, SIM-swapping, and extortion campaigns that reach beyond the original breach. Credential leaks like this one regularly cascade into gaming-account takeovers, where attackers use stolen company contacts to reset passwords or socially engineer support staff.

Medusa’s Known Track Record

Public reporting attributes the first Medusa ransomware activity to mid-2021. The group has since listed hundreds of victims across North America and Europe, with a focus on mid-sized companies in technology, manufacturing, and creative sectors. Typical Medusa playbooks begin with phishing or exploited remote-desktop credentials, followed by rapid exfiltration of sensitive folders before encryption. The group’s extortion style combines data leaks on its dedicated site with direct pressure on executives, often releasing small samples to prove possession. Exact prior victims are tracked by ransomware analysts, but the pattern remains consistent: list the company, publish proof, then escalate pressure until payment or full disclosure occurs.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup of exposed data.
• Rotate any password you ever used at EightPixelsSquare or its games anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing accounts.

The Medusa listing of EightPixelsSquare is a reminder that even specialist game studios hold data that can expose ordinary families. Starting with a clear picture of your current exposure is the most practical step you can take today. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts. Source: https://www.ransomware.live/id/RWlnaHRQaXhlbHNTcXVhcmVAbWVkdXNh