Cyber Incident Victim: Ankama
Date:
Dec 2024
Location:
France
Summary
Ankama, developer of the online game Dofus, suffered a massive DDoS attack shortly after launching a major graphical update and new servers, forcing widespread server shutdowns that prevented player access and gameplay. The studio responded with emergency maintenance and security reinforcement efforts to mitigate the disruption, which impacted both returning players migrating historical characters and new users during a peak engagement period following the update.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 4, 2024, two days after launching Dofus 3—a major graphical update and engine overhaul for its flagship MMORPG—French gaming studio Ankama suffered a disruptive DDoS attack targeting its game servers. The attack rendered Dofus servers completely unavailable, forcing Ankama to initiate emergency maintenance across all infrastructure. This abrupt shutdown prevented both existing and new players from accessing the game or logging into their accounts, directly impacting tens of thousands of daily users concentrated primarily in France. The incident coincided with the reintroduction of legacy player characters on updated servers and the opening of new servers for incoming players, compounding disruption during a peak engagement period. Kaspersky's threat intelligence maps publicly corroborated the scale of the attack, though no threat actor claimed responsibility. Ankama's immediate response focused on mitigating the DDoS while implementing unspecified security enhancements to fortify server resilience.
The cyberattack occurred during a pivotal moment for Dofus, which celebrated its 20th anniversary in September 2024 and retained rare longevity as a domestically developed French MMO. Operational disruption not only affected gameplay but also risked undermining player confidence following the high-profile Dofus 3 relaunch, which modernized the game’s visual identity and technical foundation. Ankama maintained public communication regarding server maintenance but did not disclose attack specifics, restoration timelines, or evidence of data compromise. No collateral damage to other Ankama titles or services was reported. The studio’s containment strategy prioritized server security over immediate restoration, reflecting the severity of the sustained DDoS pressure. Ongoing player unavailability persisted through the initial attack phase, with no subsequent updates confirming full service recovery at the time of reporting.