Cloud Imperium Games (CIG), the development studio behind Star Citizen, says that some of their systems were breached by hackers and that some personal data of users was stolen. This security breach happened in January 2026 and is just now being disclosed to the public.
The disclosure, in addition to coming two months after the security breach, was also tucked away in a small notice on the Cloud Imperium Games' website. CIG says that they discovered the security breach on January 21, 2026, calling it a "systematic and sophisticated attack."
As a result of this security breach, CIG says that the hackers were able to gain "unauthorised access to some backup systems, including limited access to users' personal data."
CIG acted quickly to contain the activity and block further access to this data and CIG systems, and we have refreshed security settings to ensure that there is no threat to our games or our users.
While CIG is still monitoring the situation, we do not consider that the incident poses a risk to the safety of our users. The data impacted relates only to basic account details (i.e. metadata, contact details, username, date of birth, and name). No financial or payment information was stored in the affected systems and was not accessible. No passwords were impacted, and the access was read-only. No data-injection or modification occurred.
While CIG is still monitoring the situation, we do not consider that the incident poses a risk to the safety of our users. The data impacted relates only to basic account details (i.e. metadata, contact details, username, date of birth, and name). No financial or payment information was stored in the affected systems and was not accessible. No passwords were impacted, and the access was read-only. No data-injection or modification occurred.
CIG says that they "do not anticipate that this incident will have any impact on our users." However, users should be mindful of potential phishing or social engineering attempts made against them using any of the data that may have been stolen. Be vigilant and be mindful of who exactly you're about to give your sensitive information to.
