Highlights
- The IGRS breach led to over an hour of 007 First Light footage surfacing online, revealing major story elements.
- A database flaw made private classification materials publicly accessible.
- The breach also exposed thousands of developer email addresses.
A security lapse in Indonesia’s game ratings system has exposed unreleased game footage and developer data. VGC reported that 007: First Light is among the most affected titles. The Indonesian Game Rating System (IGRS) database briefly made private classification materials publicly accessible. This exposure allowed users to view content that developers never intended to release.
More than an hour of footage from IO Interactive’s 007: First Light is now circulating online, including scenes that appear to reveal major story details and the ending. The game is set to launch on May 27, 2026, and is framed as a James Bond origin story. It stars Patrick Gibson as a 26-year-old recruit seeking ‘00’ status through an MI6 mission.
The leak also revealed several major narrative moments from gameplay and cut-scenes of Bandai Namco's Echoes of Aincrad, scheduled for July 2026. Konami’s Castlevania: Belmont’s Curse and Ubisoft’s Assassin’s Creed IV Black Flag remaster were also listed in the exposed database.
However, no footage from those titles has been widely shared.
Ratings System Leak Raises Security Concerns for Game Submissions
Beyond spoilers, the breach reportedly exposed thousands of developer email addresses, raising concerns about data handling during classification. Developers routinely submit footage highlighting elements like language, violence, or gambling to secure ratings approval.
Riot Games' age ratings manager, Nic McConnell, stated that the IGRS system relies on shared links to review materials and noted, “It wouldn’t blow my mind if some links got opened more broadly somehow during that… ad hoc process.” He described the system as “very much a work in progress” and advised teams to limit submission content to only what is necessary.
McConnell also indicated the IGRS team operates with limited resources, describing it as a small group managing a complex process.
The incident highlights structural risks in global ratings workflows. For IO Interactive, the leak disrupts a controlled rollout weeks before launch. Meanwhile, for the industry, it underscores how third-party systems can expose both narrative content and sensitive developer data.
