Insomniac Games, known for hits like Marvel’s Spider-Man and the highly anticipated Marvel’s Wolverine, faced a security breach by a ransomware gang.

This group, called Rhysida, asserts access to personal data of current and former employees, including sensitive documents like passport scans and confidential emails. Even the voice actor behind Spider-Man, Yuri Lowenthal, seems to have been targeted.

Rhysida went further, claiming to possess unreleased material from Insomniac’s Marvel’s Wolverine, including character art and screenshots. They’re demanding a response within a week, threatening to publish the data if not acknowledged. Simultaneously, they’re auctioning this information, starting at 50 Bitcoin (roughly $2 million).

This isn’t Rhysida’s first appearance; it’s a relatively new cyber threat, previously targeting UK-based institutions like The British Library and a hospital associated with the Royal Family. Their ransomware, affecting primarily Windows users, encrypts files and demands a ransom for access.

Government agencies have raised alarms about Rhysida, warning various sectors to bolster cybersecurity defenses against this malware and similar threats. While Sony, the parent company of Insomniac Games, acknowledged the breach, they currently believe it hasn’t affected other branches.

Interestingly, this isn’t the first time Sony faced hacking incidents this year. Previous breaches targeted employee data, showing a concerning trend for the tech giant’s security measures.