Customer payment data stolen in Unity Technologies’s SpeedTree website compromise

Unity Technologies has confirmed that malicious code on its SpeedTree checkout page skimmed sensitive data from hundreds of customers, with the site compromised from March 13, 2025 and discovered on August 26, 2025. The incident potentially exposed information entered during purchases, including name, address, email, credit card number and an access code, for customers who bought from March 13 to August 26, 2025. The company disabled the SpeedTree site, conducted an investigation, and removed the code.

According to the data breach notification shared with the Maine Attorney General, the total number of affected persons is 428. Unity is offering 12 months of free credit monitoring and identity protection through Equifax to help safeguard those affected.