“For example, with the email addresses and specific details of user issues with the service such as in transactions and developer messages could allow bad actors to pose as game support and direct users to malicious websites where their credit card details can be stolen,” WizCase said.

Pulled together, this database could provide a rich set of data for cybercriminals to hone their phishing emails to make them look legitimate, WizCase said. Feedback massages included account IDs, email addresses, in-game purchase prices and payment providers. The stockpile included 5.9 million player profiles, 2 million transactions and 587,000 feedback messages. WizCase said, in all 1.47 terabytes of data was left vulnerable. The game follows the open world format, allowing players build worlds and armies that can be directed to battle other user armies. According to WizCase, AMT Games has not responded to inquiries, but the leaky server is now secure.īattle for the Galaxy is available for Android and iOS devices, via the Steam gaming platform and also through the game publisher’s browser-based version of the game.

An Elasticsearch server holding personal data of 6 million players of the popular mobile game Battle for the Galaxy was discovered insecure and containing over 1 terabyte of unencrypted data, meaning anyone with a link could access data stored on the repository.Įthical hackers WizCase found the data and quickly alerted AMT Games, the publisher of Battle of the Galaxy, that the customer data was exposed.

Battle for teh galaxy cheat