Ankama: customer contact details exposed after a cyberattack

On 30 April 2026, Ankama — the Roubaix-based French video game studio behind Dofus and Wakfu — notified its players by email that it had suffered a cyberattack resulting in unauthorized access to data tied to user accounts. Reporting placed the number of affected players in the hundreds of thousands.

The data accessed was account and order-related rather than full payment credentials. Exposed categories included:

• First and last names
• Email addresses
• City / location and connection IP addresses
• Purchase and order history (order dates, billing country, items bought, amounts)
• Partial card numbers only (first 6 and last 4 digits), insufficient on their own to make a payment

Ankama stated that no passwords were affected and that full banking details — security codes and expiry dates — were not part of the exposed data. Even so, the combination of names, emails and purchase records leaves players exposed to targeted phishing, fraudulent-refund scams and social-engineering attempts.

Ankama said it took immediate measures to contain the attack and harden its systems, and in a notably drastic response rolled its servers back to a state from roughly three weeks earlier — erasing three weeks of player progression in the process. The company urged users never to share credentials by email or phone and to log in only through official platforms. The incident is reported as contained.