2021 Ubisoft — Just Dance player data exposure via infrastructure misconfiguration
Data compromised
Technical player identifiers and optional user-submitted dance videos per Ubisoft and contemporaneous trade reporting
Technical writeup
Ubisoft disclosed that a misconfiguration exposed Just Dance–related player “technical identifiers” (e.g., GamerTags, profile IDs, device IDs) and user-uploaded Just Dance videos that had been processed for in-experience social features. The vendor stated Ubisoft account credentials were not compromised in the same incident and that affected users were notified/remediated in the December 2021 disclosure window.
Root cause
IT/infrastructure misconfiguration permitting unauthorized access to game-telemetry and video-processing paths