Star Citizen players react to a delayed data breach disclosure

admin March 5, 2026No Comments

It was recently revealed by the developers of Star Citizen that some of the game’s databanks suffered a data breach on January 21. The hackers were able to gain “limited access to users’ personal data,” according to Cloud Imperium Games (CIG), and the company says it “acted quickly to contain the activity and block further access to this data and CIG systems.”

What info was hacked?

• Metadata
• Contact details
• Usernames
• Dates of birth
• Names

CIG says it has updated its security settings in light of the breach to prevent any future hacks, and it claims that the breach has not put anyone’s safety at risk. But the next line lays out what was stolen: metadata, usernames, dates of birth, names, and other contact details.

Despite CIG saying that no financial info or passwords were stolen, there’s a lot that bad actors can do with just a small amount of information. Gamers are rightfully upset.

Star Citizen is one of the most interesting PC games out there, and maybe not for the reasons you think. It has been in development since 2012 and has gobbled up about a billion dollars in support money from its players. Yes, a BILLION dollars have gone into its development, and it’s still not finished.

The game has been purchased by millions of intergalactic explorers, and thousands of PC gamers play every day. A lot of those players are already on edge due to the 14-year development cycle, and the outrage I’m seeing online is clearly a result of years of pent-up frustration.

The focus of a lot of outrage is, of course, CIG’s handling of the data breach. On the Star Citizen forums, a popular thread has the OP asking why it took more than five weeks to make an announcement about the hack, as well as why CIG didn’t bother to send out an email or paste a front-page notice on its website. That service alert I linked to earlier is indeed kind of buried on the site.

The OP who created the hot thread on the Star Citizen forum brings up some excellent points about CIG’s handling of the data breach. (Image credit: CIG)

Many users in the same forum thread are discussing how many security disclosure laws CIG broke in light of it being a UK company and subject to GDPR. LinkedIn was notably fined $334 million when it violated GDPR data processing laws in 2024. I’m not saying the same will happen to CIG, but it’s a hot topic amongst irate users.

Image 1 of 2

Star Citizen data breach forum discussion — A Star Citizen member expresses frustration with how CIG handled its data breach.(Image credit: CIG)

On Reddit, the discourse is much more of the same, with outrage and frustration spewing out of keyboards around the world.

So, CIG, were you going to tell me about the data breach as GDPR requires you to? from r/starcitizen

I have no idea how this latest controversy will affect Star Citizen’s player base, nor how GDPR laws could come into play. What I do know is that a lot of PC gamers are getting fed up with the game, many only sticking around due to a sunk-cost fallacy after years of ship, armor, weapon, and cosmetic purchases made with real money.