Ankama Hit by Major Cyberattack, Exposing Hundreds of Thousands of User Accounts French video game publisher Ankama, based in Roubaix, disclosed a significant cyberattack on Thursday, resulting in unauthorized access to user data and account breaches across its popular games, including Dofus and Wakfu. The incident has potentially impacted hundreds of thousands of accounts, though the exact number remains unclear due to users often holding multiple accounts for in-game characters. ### Compromised Data The breach exposed the following user information: - Full names - Email addresses - Partial payment details (first six and last four digits of credit cards expiration dates and CVV codes were not accessed) - Order dates, billing countries, purchased items, and transaction amounts Ankama confirmed that the stolen payment data alone is insufficient to process fraudulent transactions. However, the company acknowledged that some accounts were hijacked, with users reporting lost in-game items, deleted characters, and other unauthorized changes. ### Regulatory Response & Prior Incident The CNIL (France’s data protection authority) has been notified, and Ankama has filed a formal complaint. This attack follows a February 2026 breach, where unreleased episodes of Wakfu’s animated series were leaked content not slated for release until 2028. While passwords were not exposed, security experts warn that the stolen data could fuel phishing scams and targeted fraud attempts. The incident underscores the growing risks of credential-based attacks in the gaming sector.