Did Epic Games Get Hacked? The 2024 Claim, 2026 Status

Epic Games hack claim in 2026: the short answer

Epic Games was not hacked in the February 2024 incident. The group called Mogilevich claimed it had stolen 189GB of Epic data, but days later it admitted it had made the claim up. Its spokesperson called the group "professional fraudsters" rather than ransomware operators.[5][6][7]

The fake hack was bait for other criminals. Mogilevich said the hype helped it sell fake ransomware infrastructure to eight would-be hackers.[5] We found no confirmed Epic Games data breach in the sources we read as of 2026. If you came here after a search such as "did Epic Games get hacked today", the steps below help you check your own account.

Timeline: from ransom claim to confession

What changed since 2024

The open question in our original report has an answer now. When the promised leak date came, visitors to the group's site did not see source code or customer data. They saw a message in which a spokesperson nicknamed Pongo said none of the listed databases were real.[5] The group said it had used big names only to gain attention for its real business, which was cheating other criminals.[5][6]

By its own account, Mogilevich sold fake ransomware infrastructure to eight buyers. It also asked buyers for screenshots of their crypto wallets and then claimed to have hacked those wallets to demand more money.[5] The group also claimed it had taken one buyer for $85,000 with a fake hacked network of the drone maker DJI.[5] We cannot verify these claims, since they come from fraudsters.

Some people who search "game alleges cofounder hijacked its domain" land on this page. That is a different story. In January 2026, three co-founders of the studio That's No Moon sued another co-founder, alleging he hijacked the company's website domain.[8] It has no link to Epic Games or to Mogilevich.

Risks around fake hack claims (our analysis)

A fake breach can still hurt real users. This list is our analysis of what usually follows a loud hack claim against a big gaming brand.

• Phishing that copies the news. Emails that say "Epic Games was breached, reset your password here" and lead to a fake login page.
• Fake free V-Bucks and account checkers. Sites that ask for your Epic login to "check if you were affected".
• Malware posing as leaked files. Downloads sold or shared as "Epic source code" that carry information stealers.
• Credential stuffing. Old passwords from other leaks tried on Epic accounts, which works when people reuse passwords.
• Scams on criminals. As this case shows, fraudsters also target buyers of stolen data.[5]

How to protect your Epic Games account

1. Check official news. In 2024 the panic started from a screenshot of a dark web page shared by a third party.[5] Wait for a statement on Epic's own channels before you act on a rumour.

2. Use a unique password. Give your Epic account a password you use nowhere else. Our leak check shows whether your email appeared in a known breach.

3. Turn on 2FA. Two-factor sign-in stops most account takeovers even when a password leaks elsewhere.

4. Review devices. Look at the signed-in sessions and linked accounts, and remove anything you do not recognise.

5. Skip fake checkers. No outside site can tell you whether you were in an Epic breach by taking your login. Sites that ask for it are phishing; see how to report phishing.

6. Scan your PC. If you downloaded cheats or "leaked" files, scan for information stealers first, then change passwords from a clean device. Our malware removal guides can help.

What is still unknown

• Who is behind Mogilevich. The sources we read name only a spokesperson nickname.
• Whether the group's claims about its buyers and the $85,000 sale are true.[5]
• Whether any Epic Games incident after 2024 was confirmed. We found none in the sources we read.

Our original 2024 report

The text below is our report as first published in 2024. We keep it unchanged for the record; the sections above bring it up to date.

Recent reports have surfaced regarding a potential ransomware attack on Epic Games, the creator of Fortnite and the Unreal Engine.[1] A hacker group named Mogilevich claimed to have infiltrated Epic Games' servers, allegedly extracting 189GB of sensitive data, including emails, passwords, and payment information from customers, along with source code.

This gang allegedly gave Epic Games a deadline to meet their ransom demands in order to stop the data leak. In spite of these statements Epic Games has vehemently denied the accusations, claiming that there is no proof of a security breach.

The company took to social media to announce its findings, emphasizing that it found no proof of any ransomware attack and that the alleged hackers had not made any direct contact to demand ransom.

Almost 200GB of confidential data is allegedly being sold for $15,000 on the dark web

After becoming aware of the ransomware claims, Epic Games conducted an in-depth examination to determine the accuracy of these assertions. A screenshot of a dark web page that appeared to be promoting the hack went viral online and prompted the business to launch an inquiry.

When Epic Games tried to contact the Mogilevich group to request evidence of the hack, the group did not respond. To make matters more complicated, the hacker gang allegedly demanded that potential buyers provide "proof of funds" in the form of bitcoin assets in exchange for selling the stolen data for $15,000.

Despite these interactions, Epic Games maintains that there is no concrete evidence to suggest any data compromise occurred, emphasizing the lack of direct contact or proof from the hackers.

One of the official Epic Games accounts on Twitter said the following:[2]

There is zero evidence right now that the ransomware claims from Mogilevich are legitimate. Mogilevich has not contacted Epic or provided any proof of the veracity of allegations.

Ransomware threats in the gaming industry

The growing threat of ransomware attacks in the gaming sector has been brought to light by the latest claims against Epic Games. These kinds of cyberattacks are growing more common and sophisticated, aiming not only at game makers but also at their large user bases.

Cybercriminals find the gaming sector to be a profitable target due to its extensive databases of sensitive user data and intellectual property. Even if it was subsequently proven false, the possible security compromise at Epic Games highlights the ongoing danger and significant consequences.

Historically, the gaming industry has witnessed several high-profile ransomware attacks. For example, Sony's Insomniac Games studio suffered a significant data breach last year,[3] leading to the leak of information on five unannounced game titles. This incident revealed not just upcoming projects but also the personal data of employees, demonstrating the dual threat to both corporate assets and individual privacy. Similarly, Ubisoft faced its own security challenges with leaked screenshots of internal software,[4] although the damage was less extensive compared to the Insomniac Games breach.

Who is Mogilevich?

Mogilevich represents a relatively new player in the ransomware domain, with claims of attacking several organizations besides Epic Games, including international entities. Unlike other hacker groups, Mogilevich does not publicly share samples of stolen data, instead opting to sell directly to verified buyers, raising suspicions about the authenticity of their claims.

The group has also advertised itself as a Ransomware-as-a-Service operation, aiming to recruit affiliates for conducting cyberattacks. However, the lack of evidence linking Mogilevich to any successful ransomware encryption attacks adds to the skepticism surrounding their operations and intentions.

Although the Mogilevich group's allegations of a ransomware attack on Epic Games have raised reservations, it's possible that the charges are untrue given the lack of hard evidence and the company's resolute attitude on the issue. Nevertheless, the event serves as a warning of the ongoing cybersecurity risks that the gaming sector must deal with and the significance of strong security procedures to fend off attacks like this in the future.

Related guides on 2-Spyware

• Check whether your email appeared in a leak
• Recent data breaches
• Virus and malware removal guides
• How to report phishing