The CVs of 350 job applicants 25,000 email addresses were stolen from video game giant Eidos Interactive in a hack allegedly by a splinter group of the Anonymous online collective.
The hacking trio used zero-day vulnerabilities to crack the website eidosmontreal.com and another for video game Deus Ex according to IRC logs obtained by security blogger Brian Krebs.
Hackers debated whether to upload malware to the sites but instead defaced them and stole information, the logs showed.
Parent company Square Enix played down initial reports that 9000 resumes and 80,000 details of Deus Ex players were stolen.
"We are in the process of writing to each of the individuals who may have been affected to offer our sincere apologies for this situation,” Square Enix wrote in a statement (pdf).
“We take the security of our websites extremely seriously and employ strict measures, which we test regularly, to guard against this sort of incident.”
Hackers indicated in chat logs that they will release the stolen details on file sharing networks.
And they revealed feuding between the Anonymous factions.
The three alleged conspirators inserted personal details of former colleague and faction member "Ryan" into a hacked website.
“It’s psychotic behaviour like I have never seen. It’s like they hate each other but will work together on certain [operations] if it suits them, but then might turn on each other in the end … and then laugh it off,” Krebs said he was told by a source close to the group.
