Malicious Code on Unity Website Skims Information From Hundreds of Customers

Hundreds of Unity Technologies customers were affected by a malicious script placed on the company’s SpeedTree checkout page. The incident, which Unity says occurred on the SpeedTree website, involved code active between 13 March and 26 August 2025 that harvested information entered during purchases, including name, address, email address, payment card number, and an access code.

Unity told the Maine Attorney General’s Office that 428 individuals are impacted, and those affected are being notified and offered free credit monitoring and identity protection services. The disclosure follows other Unity security advisories, including a separate Unity Editor vulnerability that has drawn attention from security researchers and industry groups.

According to SecurityWeek, the report emphasises that the compromised page specifically intended to capture user data during checkout, rather than broader site access.