Tampered Nexon Blue Archive CDN settings cause abnormal content exposure
An external attacker accessed the CDN configuration of Nexon's Blue Archive and altered the settings without authorisation, causing some content to be displayed abnormally. Nexon carried out emergency maintenance and blocked the attacker's access. It said user accounts, game data and payment information were not affected.
Key facts
- Affected organisation
- Nexon
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Abnormal exposure of some content
- Cause / method
- Unauthorised access to and tampering with CDN configuration by an external attacker
- Location
- South Korea
Timeline
- Nexon confirmed tampering with Blue Archive's CDN settings, carried out emergency maintenance and blocked access, and said user information was not affected.
- It was reported that the attacker displayed the same character in multiple places and that no personal information was leaked.
6 related reports
- 넥슨, 블루 아카이브 해킹 확인..."정보 유출 없어"
- 넥슨 '블루 아카이브', 해킹 공격에 긴급점검…"정보 유출 없어"
- 넥슨 게임도 해킹…"개인정보·데이터 유출은 없어"
- Blue Archive Hacked in “Koyukification,” Nexon Confirms No Player Data Was Compromised
- 넥슨, 블루 아카이브 해킹 사태 확인...개인정보 유출은 없어
- Blue Archive got hacked, but the hacker just spawned the same character everywhere without touching valuable data, Nexon confirms
Other incidents at Nexon
MapleStory Universe server breach exposes user information
Impact: User information and API keys for 328 developer applications exposed
On 12 November, unauthorised external access occurred in the off-chain server infrastructure of Nexon's blockchain game MapleStory Universe. The exposed data included users' wallet addresses, nicknames, connection IP addresses, locations, the first 12 characters of email addresses, transaction histories and session keys, along with API keys for 328 developer applications. The operations team put all services into emergency maintenance, and no theft of cryptoassets was confirmed.
Related reports: 4 →Nexon spends 14 years bolstering security after leak of 13.2 million users' data
13.2mImpact: Data of 13.2 million people leaked
The data of 13.2 million people was leaked from Nexon. Nexon has spent the 14 years since then strengthening its security.
Read on 딜사이트 ↗Dynamis One raided over suspected Nexon data leak
South Korean police raided game developer Dynamis One in connection with a suspected Nexon data leak. Whether data was leaked, the volume of data and the specific circumstances of the leak are unknown.
Read on Game Developer ↗Nexon weighs response to subscription-based DDoS attacks
Nexon is weighing how to respond to DDoS attacks. The emergence of DDoS attacks as a subscription service was raised as a problem.
Read on 바이라인네트워크 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.