Shadow PC

Shadow PC, also known as Shadow Cloud Computing, is a cloud gaming service provider that delivers remote high‑performance personal computers to users through a subscription model. The company’s core offering enables gamers to access a full Windows environment hosted in data centres, allowing them to play PC games on a variety of devices without needing local hardware. Headquartered in France, Shadow PC operates under the aliases Shadow PC and Shadow Cloud Computing, reflecting its focus on cloud‑based computing solutions. The service is designed to provide low‑latency streaming of graphics‑intensive applications, catering primarily to the gaming market. Users connect to their virtual machines via client applications that support Windows, macOS, Linux, Android, and iOS platforms. By managing the underlying hardware and software stack, Shadow PC aims to simplify the gaming experience for consumers who prefer not to invest in expensive local rigs. The company positions itself as a specialist in cloud‑based gaming infrastructure, emphasizing performance and accessibility as key differentiators.

In September 2023, Shadow PC experienced a data breach that originated from a social engineering attack where an employee was tricked into downloading malware disguised as a Steam game on Discord. The attackers stole an authentication cookie, which granted them unauthorized access to a SaaS management interface and allowed the extraction of customer information such as full names, email addresses, dates of birth, billing addresses, and credit card expiration dates. Although account passwords and full payment details remained secure, a threat actor later claimed responsibility and attempted to sell allegedly stolen data covering over 500,000 customers, including unconfirmed IP connection logs. Following the incident, Shadow PC revoked the compromised credentials, blocked further unauthorized access, and implemented additional security measures to prevent similar events. The breach highlighted the importance of robust employee training and multi‑factor authentication in protecting cloud‑based services. The company’s response focused on securing its management interface and reinforcing its overall security posture.