Digital Arts announced on October 21 that it had identified unauthorized access to its cloud service operation environment and internal environment. The company conducted an AI-powered comprehensive inspection of its systems, products, and internal environment on October 9 in response to rising cyber attacks. This review uncovered traces of unauthorized access that conventional inspections had missed, with the oldest traces dating back to around July 2025.
According to the company, third parties had improperly obtained authentication credentials used for cloud service operations and used them to infiltrate the service operation environment. This access potentially allowed viewing of information belonging to some customers of the following cloud services:
- i-FILTER@Cloud
- m-FILTER@Cloud (Modern Edition)
- m-FILTER MailAdviser Microsoft 365 compatible version
- FINAL CODE@Cloud
- z-FILTER
- Desk
As of noon on October 21, no evidence of external data exfiltration had been found, and no reports of information misuse or secondary damage linked to the incident had been received. To prevent further harm, Digital Arts has instructed all customers of the listed cloud services to change both administrator and user passwords. Some customers requiring additional measures have been contacted individually. Software versions installed in customer environments are not affected.
In response to the discovery, the company disabled the compromised credentials, replaced operational authentication information, stopped suspicious programs, and exchanged server authentication keys. No new unauthorized access has been detected as of noon on October 21, and monitoring continues. Digital Arts is also rebuilding its services and network to address evolving cyber threats. The firm plans to report to relevant authorities, cooperate as needed, and strengthen authentication management, access controls, and monitoring systems to prevent recurrence.
