2024 Game Freak Breach

Revision as of 02:36, 22 October 2024 by Phil564 (talk | contribs) (added stub template)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

The 2024 Game Freak Breach (also known as the "Freakleak", the "Teraleak" and the "Gigafreak") was a data breach of internal Game Freak files carried out by an anonymous user known as GameFreakOUT.

Screenshots of the attacker logged into an employee's account on the Nintendo Developer Portal show an announcement from July 31st 2024, meaning that the attackers had access to the internal servers and employee data in August 2024. It is rumored that 1 or more terabytes of internal files were exfiltrated, ranging from concept art, lore documents and semi-official fan-fictions written by Game Freak employees to full SVN source code repositories of Pokémon games.

Archives of what was exfiltrated are still being leaked to the public on the daily. Unlike the Zammis Clark Breach, where the data came into the hands of the public on 4chan, it was instead sent on a public Discord server, but the leaker later switched to sending the data in a private server.

Timeline of events

October 2024 - Present

2024, October 12

At 6:44 PM GMT, the GameFreakOUT (gamefreakout) account is created. It later joins the Discord server.

At 6:55 PM GMT, the account posted 2 screenshots of them being logged into a Game Freak employee's account on the Nintendo Developer Portal. The first one was the Account Info page, and the second was a list of products that Game Freak published for the Nintendo Switch line of systems.

At 6:32 PM, gsmirror.tar.gz was uploaded to gofile.io[1] and sent at 7:00 PM to the Discord server. The archive contains the complete source code to Pokémon HeartGold and SoulSilver, including source history.

At 7:26 PM, BW2_builds.7z was uploaded to gofile.io[2] and sent at 7:34 PM to the Discord server. Contains a few Pokémon Black 2 and White 2 builds with source code patches.

At 7:39 PM, turtleproject.7z was uploaded to gofile.io[3] and sent at 7:42 PM to the Discord. Contains source code to Pokémon Bank as latest as May 10 2024.

At 7:44 PM, a list of the codenames for every Pokémon-related Game Freak game from X/Y and newer was sent.

At 8:08 PM, 8:10 PM and 8:15 PM, 3 archives were uploaded to the Discord, being オレ-selected2.zip, rom-selected.zip and Q36H7N~B.zip respectively. They contain builds and source code to older (Famicom, DS and Super Famicom respectively) non-Pokémon related Game Freak projects.

At 8:21 PM, plmirror.tar.gz was uploaded to gofile.io[4] and sent at 8:22 PM to the Discord. Contains the source code to Pokémon Platinum, with source history.

At 8:23 PM, momiji_git_program.zip was uploaded to gofile.io[5] and sent at 8:24 PM to the Discord. The archive was passworded with ZipCrypto, but the password was cracked and found to be J89eeu4Lp. Contains the source code to Pokémon Ultra Sun and Ultra Moon.

After this, discussion was moved to a more private Discord server while the old messages were purged between the upload of the last file and the next file.

At 9:48 PM, wbmirror.tar.gz started getting uploaded to gofile.io[6], was finished uploading and sent to the newly created Discord at 0:38 AM the next day[7]. Contains the source code to Pokémon Black and White, with source history, as well as the SDK used for Platinum, HeartGold and SoulSilver.

2024, October 13

At 1:54 AM, HaveSomeFun__RandomFromBoxEnt.7z was uploaded to gofile.io[8] and sent to the Discord at 2:03 AM.

At 5:10 AM, HarmoKnight.7z was uploaded to gofile.io[9] and sent to the Discord at 5:11 AM.

At 5:33 AM, ☆同人誌GAME FREAK.7z was uploaded to gofile.io[10] and sent to the Discord at 5:34 AM.

At 5:55 AM, holoholo_allbuilds.zip was uploaded to gofile.io[11] and sent to the Discord at 6:01 AM.

At 6:08 AM, 映像案件.7z was uploaded to gofile.io[12] and sent to the Discord at 6:12 AM.

At 6:24 AM, 05_ポケモン商品・広報イラスト.7z was uploaded to gofile.io[13] and sent to the Discord at 6:25 AM.

At 6:41 AM, 02_ポケモンアニメ設定.7z was uploaded to gofile.io[14] and sent to the Discord at 6:42 AM.

At 6:44 AM, 03_ポケモンプログラム関連.7z was uploaded to gofile.io[15] and sent to the Discord at 6:45 AM.

At 7:04 AM, 梁瀬のひきつぎ資料.7z was uploaded to gofile.io[16] and sent to the Discord at 7:09 AM.

At 2:14 PM, swanmirror.tar.gz.aa was uploaded to gofile.io[17], and at 1:41 PM, swanmirror.tar.gz.ab[18] was uploaded to gofile.io. Both files were sent to the Discord at 2:18 PM.

At 3:24 PM, salmon-and-turtle-builds.7z was uploaded to gofile.io[19] and sent to the Discord at 3:41 PM.

At 4:46 PM, sangowiki.zip was uploaded to gofile.io[20] and sent to the Discord at 4:59 PM. The archive was passworded with ZipCrypto, but the password was cracked and found to be cr20140604.

At 7:48 PM, sango_builds.7z was uploaded to gofile.io[21] and sent to the Discord at 7:51 PM.

At 10:15 PM, niji-momiji-build1.7z was uploaded to gofile.io[22] and sent to the Discord at 10:18 PM.

2024, October 14

At 0:13 AM, niji_builds2.7z was uploaded to gofile.io and sent to the Discord at 0:18 AM.

At 1:58 AM, momiji_builds3.7z was uploaded to gofile.io and sent to the Discord at 2:01 AM.

At 2:23 AM, XY-staff-old.7z was uploaded to gofile.io and sent to the Discord at 2:27 AM.

At 3:53 AM, xy-random-builds.7z was uploaded to gofile.io and sent to the Discord at 4:04 AM.

At 9:37 PM, XY-Builds-P1.7z was uploaded to gofile.io and sent to the Discord at 0:16 AM the next day.

2024, October 15

At 4:30 AM, XY-Builds-P2.7z was uploaded to gofile.io and sent to the Discord at 4:34 AM.

At 8:09 AM, XY-Builds-P3.7z was uploaded to gofile.io and sent to the Discord at 8:34 AM.

At 12:47 PM, XY-Builds-P4.7z was uploaded to gofile.io, and at 12:51 PM, XY-Builds-P5.7z was uploaded to gofile.io. Both files were sent to the Discord at 1:12 PM.

At 9:04 PM, XY-Builds-P6.7z was uploaded to gofile.io and sent to the Discord at 9:13 PM.

2024, October 16

At 6:42 AM, XY-Staff.7z.aa was uploaded to gofile.io.

At 9:14 PM, XY-Staff.7z.ab was uploaded to gofile.io.

2024, October 17

At 2:32 AM, XY-Staff.7z.ac was uploaded to gofile.io.

At 4:45 AM, XY-Staff.7z.ad was uploaded to gofile.io.

At 9:06 AM, XY-Builds-P7.7z was uploaded to gofile.io.

At 6:13 PM, sangopart1.tar.gz.aa was uploaded to gofile.io.

2024, October 18

At 2:01 AM, sangopart1.tar.gz.ab was uploaded to gofile.io.