Backdoors & Breaches · Wildcard Group expansion
Our very own expansion for Backdoors & Breaches.
Ten new cards. A free pack for teams in Belgium.
Backdoors & Breaches is the incident response card game by Black Hills Information Security. The Wildcard Group expansion deck adds ten cards to the Core Deck: three ways in, one way to move, and six injects that change the game halfway through.
What’s in the pack
Ten new cards for your table. Tap one to read it.
Free pack
Reserve a free pack.
Our printed expansion deck is on its way. Leave your details and we’ll post you a pack when it arrives, free, while stocks last. We won’t promise you a date, but the packs are being printed as we speak, so soon…
Our Wildcard Group expansion deck adds ten cards to the Backdoors & Breaches Core Deck, so you need the Core Deck to play: find it in the BHIS Spearphish General Store. You can also play online at play.backdoorsandbreaches.com.
We only ship within Belgium. Elsewhere, Black Hills Information Security will sell the expansion through its own store.
How the game works
A different incident every game.
-
The Incident Captain builds the attack
One player is the Incident Captain. They secretly pick one attack card for each stage: how the attacker got in, how they moved, how they stayed and how the data left. Then they set the scene: enough to start the investigation, without giving the cards away.
-
The defenders investigate
Each turn, the rest of the table agrees on one Detection, such as SIEM log analysis, endpoint analysis or firewall logs, and rolls a d20. Established Detections, the ones the team is most experienced with, add +3. When a roll fails, the team talks through why it wouldn’t have worked: that’s where the learning happens.
-
Ten turns, and the situation changes
Reveal all four attack cards within ten turns and the team wins. You win or lose together. A failed roll costs a turn, and along the way Injects change the scenario: someone runs the ransomware during isolation, an analyst goes down, or the gateway catches the beacon.
Shuffle and play again: every combination of cards is a new incident, and our ten cards add new ways in, a new way to move and new twists.
Play it online
No table? Play in your browser, with the Core Deck and our ten cards.
Play online with our cardsOr play the original online game by BHIS, and read all about Backdoors & Breaches.
Play it with us
Play it before it becomes real.
Backdoors & Breaches teaches how an incident unfolds. We take it one step further: a scenario built for you, played with your team, and help when it becomes real.
-
We listen and design a scenario
We start with a conversation: how your organisation works, what worries you and what your expectations are. From that we build a scenario that could really happen to you. Or we let the cards decide and play a random scenario. Either way, you’ll learn a lot.
-
We play it with your team
We run the session and bring what we have learned in hundreds of real incidents to the table. We challenge your choices and push you past the obvious answer. At every step we ask why you decided what you did: what else you could have done, and why an option would work or fail. Afterwards you get targeted recommendations and feedback you can act on.
-
We can be there when it’s real
When it stops being a game, the choice is yours. If you want, we help you through the incident, lead it with you, and sit at your crisis table as an adviser.
Made in cooperation with Black Hills Information Security
A big thank you to the BHIS crew for their support, and for being the awesome bunch of people they are.
Backdoors & Breaches is their game. We’re proud to add ten cards to it.