Activision Data Breach

What happened?

In December 2022, attackers socially engineered an Activision HR employee into disclosing information which led to the breach of almost 20k employee records . The data contained 16k unique email addresses along with names, phone numbers, job titles and the office location of the employee. Activision advised that no sensitive employee information was included in the breach.

When did it happen?

The breach date in the public record is December 4, 2022. The record was added to the catalogue on October 3, 2023 and last updated there on October 3, 2023.

What information was reported as exposed?

• Email addresses
• Geographic locations
• Job titles
• Names
• Phone numbers

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Activision or used activision.com around December 4, 2022. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.