Skip to content

Shadow

Disclosed Oct 12, 20232 years ago543,295 accountsUnverified

Social engineering attack on cloud gaming firm Shadow exposes customer data

French cloud gaming company Shadow told customers that an employee was tricked via Discord and a fake Steam game in late September 2023, letting attackers reach customer data at a SaaS provider. A hacker claimed to be selling data on more than 530,000 customers, which Shadow did not dispute.

What is known

People affected543,295 (accounts in the leaked data, per Have I Been Pwned)
DisclosedOct 12, 2023
DiscoveredSep 2023
HappenedSep 28, 2023
AttackPhishing
Data exposedDates of birth, Emails, Names, Addresses
SectorGaming · FR
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Shadowhaveibeenpwned.com · Aggregator
Cloud gaming firm Shadow says hackers stole customers' personal datatechcrunch.com · News

Notices filed

WhereFiledPeople
ResearchtotalOct 12, 2023
Have I Been Pwnedaccounts in the dataAug 11, 2024543,295
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Shadow to https://techcrunch.com/2023/10/12/shadow-hacked-customers-personal-data-stolen/ · seed source
  • 2026-09-25 · country: empty to FR · seed source
  • 2026-09-25 · sector: tech to gaming · seed source
  • 2026-09-25 · attack: unknown to phishing · seed source
  • 2026-09-25 · disclosed: 2024-08-11 to 2023-10-12 · seed source
  • 2026-09-25 · discovered: empty to 2023-09 · seed source
  • 2026-09-25 · summary: In September 2023, the cloud gaming provider Shadow suffered a data breach that exposed over half a million customer records . The data included email and physical addresses, names and dates of birth. to French cloud gaming company Shadow told customers that an employee was tricked via Discord and a fake Steam game in late September 2023, letting attackers reach customer data at a SaaS provider. A hacker claimed to be selling data on more t · seed source
  • 2026-09-25 · title: empty to Social engineering attack on cloud gaming firm Shadow exposes customer data · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Shadow

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.