Travian games claimed by ransomware cartel

Travian Games, a Munich-based developer of the popular game Travian: Legends, was uploaded to a dark web blog ransomware that cartels use to showcase its latest victims.

The attacker group Rhysida claims to have stolen a massive catalog from the German game developers with nearly 800,000 files that comprise 560GB of data. However, at the moment, it’s unclear what type of data may have been accessed in the supposed attack.

Ransomware cartels threaten companies to leak stolen data to muscle their victims into paying the ransom.

We have reached out to Travian Games for comment but did not receive a reply before publishing.

Travian Games has been active since 2004 after it launched its flagship game, Travian: Legends, which attracted millions of players worldwide. The company is also behind Rail Nation, UnitedGP, Crowfall, and other games.

Meanwhile, Rhysida ransomware is a newcomer, first observed in May 2023.

According to a November advisory by the US Cybersecurity Infrastructure and Security Agency (CISA), the gang is known for targeting the healthcare industry, although it has hit the education, government, manufacturing, and technology sectors as well.

Rhysida is also thought to have ties to Vice Society, another notorious threat group known for its attacks on the education sector, primarily in the US, Canada, and the UK.

Rhysida made waves after a successful attack on the Chilean government, which included leaking stolen data online in June and the Prospect Medical Group in August.

According to Ransomlooker, a Cybernews tool for ransomware monitoring, the gang has victimized nearly 50 organizations over the last 12 months.