Playasia Store Pulled Offline After Weeks of 'Increasingly Sophisticated and Relentless Attacks'

Hong Kong-based online retail store Playasia was forced to temporarily shut down after weeks of aggressive cyberattacks, the company has claimed. The news was announced on X / Twitter via a message from company CEO Jan Neuhäußer.

“After weeks of increasingly sophisticated and relentless attacks against us and several of our trusted partners, we made the decision to go dark while we complete a full security audit and harden our systems,” the CEO said.

“This is not a step we take lightly. Playasia has been our home, and your home, for nearly 24 years, and the thought of stepping away even for a short while breaks my heart.”

According to the company, the attacks aren’t random and Playasia is listed as a target alongside thousands of other digital-first companies. “This is a coordinated, systemic campaign, not something aimed only at Playasia,” Neuhäußer continued.

“Watching our team work around the clock, exhausted but still fighting to protect what we have built together, has brought me to tears more than once. Many of them have families who depend on them. I have my own. The passion that has driven this community of gamers serving fellow gamers for over two decades is something we will not let anyone take from us.

“We have reported everything to the relevant authorities and cybercrime units worldwide and continue to share every detail that can help them pursue those responsible. We are doing everything in our power to protect our customers, our partners, and our people.

“Your support over the years has meant more than I know how to say. Please stay tuned for updates on our social channels and here.”

Playasia was founded in 2002 and is popular for its range of region-exclusive or Asian-English versions of video games, toys, and collectibles. This comes in the middle of what security professionals are calling Black October, during which a critical flaw was found in PHP, a scripting language affecting 70% of websites.

“Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities,” said the NSA cyber security division. “PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend (sic) that organizations take the system offline until it can be fully mitigated.”

There is no evidence to suggest the Playasia shutdown is linked to the new vulnerability, which has seen swarms of AI agents hacking the internet, but it’s certainly a dark time for internet security.

Photo by Donato Fasano/Getty Images.