Particle.news

Download on the App Store

Nexon Traces Blue Archive’s Koyuki Hack to CDN Redirect, Says Player Data Is Safe

The publisher attributes the prank-like intrusion to a tampered client configuration that redirected assets to a Netherlands IP.

Overview

  • Blue Archive was taken offline for roughly six hours on August 31 for emergency maintenance to remove the unauthorized changes.
  • Investigators found that CDN-managed environment settings were altered to redirect client content to IP address 45.94.31.77 in the Netherlands.
  • Nexon says the incident only affected client-side displays and confirms accounts, game data, and payment information were not impacted.
  • Players who log in between September 1 and September 8 receive a compensation bundle that includes a 10-pull ticket, AP, coins, permits, credits, and activity tickets.
  • Nexon has reported the incident to the Korea Internet & Security Agency and says it is introducing additional restrictions and security countermeasures.