Incident BriefingsActivision Blizzard security incident

Activision Blizzard security incident

SMS phishing of an HR employee. Unreleased internal game content accessed.

Last modified

Summary

  • Environment: Gaming
  • Operational impact: Unreleased internal game content accessed
  • Financial impact: No financial figure is established by the reviewed source evidence
  • Record status: Developing record. Reviewed September 19, 2026; updated as evidence emerges.

What happened

In 2022, Activision Blizzard experienced an incident in its gaming environment. The retained source describes the attack path as follows: SMS phishing of an HR employee. [1]

The documented consequence was: Unreleased internal game content accessed. [1]

Impact

  • Documented impact: Unreleased internal game content accessed. [1]
  • No financial loss, ransom amount, recovery cost, or regulatory penalty is established by the reviewed source evidence.

Timeline

  1. Documented public update

    The Activision confirms data breach exposing employee and game info records the incident facts used in this briefing.

    [1]

  2. Briefing updated

    This briefing was last reviewed and updated on September 19, 2026.

Threat Group & Attack Vector

The retained source describes the attack path as follows: SMS phishing of an HR employee. The canonical record does not add intrusion steps beyond those supported by the source. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

Response

The reviewed source does not describe containment, notification, or restoration steps in enough detail to summarize them responsibly.

This account is bounded to Activision confirms data breach exposing employee and game info. Details absent from that evidence are left unresolved rather than inferred. [1]