Cyber Incident Victim: 24 Hours of Le Mans Virtual
Date:
Jan 2023
Location:
France
Summary
A suspected security breach disrupted the 24 Hours of Le Mans Virtual esports race, causing server issues that ejected multiple drivers mid-competition. The leading competitor was disconnected and demoted to 17th place before abandoning the race entirely, publicly condemning the event's organization. Organizers confirmed the security incident, paused the race to implement protective measures, and attempted a restart. The disruption impacted both professional drivers and esports participants during the high-stakes finale of a championship with a $250,000 prize pool, underscoring operational vulnerabilities in major virtual competitions that attract significant financial investments and sponsorship deals.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The 24 Hours of Le Mans Virtual esports championship, a five-round endurance racing competition featuring real-world FIA drivers and professional esports players, experienced a significant disruption during its live 24-hour finale on or around January 14, 2023. The event, which offered a $250,000 prize pool, was compromised by server instability that affected multiple competitors. Reigning Formula 1 World Champion Max Verstappen, then leading the race by over a minute, was forcibly disconnected from the game servers. Upon reconnecting approximately 17 minutes later, his vehicle had been reset to 17th position. Despite an hour-long effort to regain ground, Verstappen only advanced to 14th place—two laps behind the leaders—before withdrawing from the competition entirely. Other drivers reportedly encountered similar connectivity issues during the race.
Event organizers publicly acknowledged a "suspected security breach" during the incident and implemented immediate measures to bolster server security while attempting to resume the race. The disruption had tangible competitive consequences: Verstappen abandoned his participation and subsequently criticized the event's management on social media, declaring it a "clown show" and vowing never to compete again while encouraging others to uninstall the game. The incident underscored operational vulnerabilities in large-scale esports events, where server integrity is critical given substantial financial stakes involving sponsorships, broadcasting rights, and gambling markets. While organizers did not confirm the breach's origin, the article noted that distributed denial-of-service (DDoS) attacks commonly target such events for extortion or disruption. No ransom demands or perpetrator claims were specifically cited in relation to this incident. The championship concluded without resolution of the competitive imbalance caused by the server disconnections.