Security Incident at our Video Platform

Security Incident at our Video Platform

Last week, Supercell was the target of multiple cyber attacks. One of them caused a security incident at the video platform we have used to host internal videos, such as company meetings and presentations. An unauthorized party gained access to the platform and copied some of our internal video content.

After we learned about the incident, we blocked further access, took the service offline, and began investigating together with the platform and their security experts. We have filed a police report, submitted a notification under the EU Cyber Resilience Act (CRA), and notified the Data Protection Ombudsman.

Based on our investigations on the attacks so far, no player data was affected.

The videos include current and former Supercell employees, as well as some guests and partners who took part in internal events. Information in the videos may include people's names, images, and voices. Names and email addresses of the platform's users were also accessed.

What to look out for

This material can be used for creating convincing targeted phishing, impersonation and other kinds of scam messages. Please be cautious with unexpected messages, calls, or video calls that claim to come from Supercell or someone at Supercell, especially if they ask for money, passwords, access, or files. If something feels off, verify it through a channel you already know and trust.

If you have attended an event as a speaker or presenter at Supercell, or hosted by Supercell, that has been recorded, it is very likely that you're impacted by the breach. If you have worked with Supercell, you can email [email protected]. To the extent we can, we'll provide further details if not covered here.

Protecting information entrusted to us is important to us, and we'll keep strengthening how we do it. As the investigation is ongoing, we can't share further details at this time.