EpicGames Listed by mogilevich Ransomware Group

On February 27, 2024, video game publisher Epic Games appeared on the leak site operated by the mogilevich ransomware group. The listing claims the attackers quietly breached the company’s servers, exfiltrated internal files, and are now offering the data for sale. The 189 GB package is said to contain email, passwords, full name, payment information, source code and other material. The group set a public deadline of 3.4.24 for payment or further release.

Reported Details from the Listing

The mogilevich leak site states that it carried out an attack against Epic Games’ servers and successfully exfiltrated data. It lists the compromised information as including email addresses, passwords, full names, payment details, source code, and additional unspecified files. The total volume is reported as 189 GB. The disclosure does not quantify how many individuals are affected, nor does it specify which internal systems were compromised. It notes that the data is for sale and directs interested parties, including Epic Games employees, to contact the group directly. No independent verification of the exact contents has been published by Epic Games at the time of writing.

Why This Matters for You and Your Family

If you have ever created an Epic Games account, made a purchase on the Epic Store, or played Fortnite, Unreal Tournament, or any other title published by the company, your personal information may be inside the stolen material. Passwords and payment information are particularly dangerous because many people reuse the same credentials across services. A breach at a gaming company can therefore open the door to account takeovers on email, banking, or social media. Children and teenagers who use family-shared accounts or their own profiles are equally exposed. The disclosure indicates that full names and email addresses were taken, data that can be combined with other leaks to build detailed profiles of you and your household.

The Doxxing and Identity-Chain Risk

Stolen gaming credentials rarely stay isolated. Attackers link an Epic username to an email address, then that email to a phone number or residential address found in other breaches. This creates an identity chain that can lead to doxxing, SIM-swapping, or targeted extortion. Public reporting on similar gaming breaches shows that children’s accounts are frequently weaponized because parents often link them to the same payment methods and recovery addresses. Once passwords and personal details surface on criminal forums, the risk of cascading account takeovers grows quickly. The mogilevich listing explicitly mentions that the data includes source code, which may contain internal comments, developer emails, or configuration details that further expand the attack surface for anyone whose information is inside the archive.

Mogilevich Group Track Record

Public reporting attributes the mogilevich ransomware operation to a group that emerged in late 2023. It has targeted a range of mid-sized organizations, focusing on companies with valuable intellectual property or large customer databases. Typical playbooks involve initial access through compromised credentials or vulnerable remote desktop services, followed by exfiltration of sensitive files before encryption. The group’s extortion style combines data sales on leak sites with direct pressure on employees and partners. While not as widely tracked as some older ransomware families, mogilevich has demonstrated willingness to publish samples and set short deadlines to force negotiation. The exact tactics used against Epic Games remain unknown, but the leak-site language matches the group’s observed pattern of quiet infiltration followed by public listing.

What to do

• Run a DoxxScan to map every link between your gaming handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate the password used on your Epic Games account anywhere it is reused and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household — DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same address or payment method.
• Let remediation specialists handle takedown requests for any exposed personal information appearing on data broker or underground sites.

The incident underscores how a single gaming breach can feed long-term identity theft and doxxing campaigns against ordinary players and their families. Starting proactive defense now limits the damage from both this leak and the ones that will inevitably follow. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.