Path of Exile 2 Issues Apology for Data Breach

Grinding Gear Games, the developer behind the popular game Path of Exile (PoE), has issued a heartfelt apology following a significant security breach. The incident, which compromised over 66 accounts, was caused by a hacker gaining access to a test Steam account with admin rights. This breach not only affected PoE but also the upcoming Path of Exile 2.

Over 66 Accounts Compromised

The breach unfolded when a hacker exploited a Steam PoE account used for testing purposes. This account, lacking any linked purchases, phone numbers, or addresses, made it easier for the attacker to deceive Steam's customer support into granting access. Using the tools typically employed by customer support agents, the hacker reset the passwords of 66 different PoE 1 and PoE 2 accounts, subsequently deleting the notification emails to cover their tracks.

The compromised data included sensitive information such as email addresses, Steam IDs, IP addresses, shipping addresses, and unlock codes. The hacker also accessed transaction histories and private messages, raising concerns about potential misuse of this data for malicious activities.

Developers Promise Better Security Measures

In response to the breach, Grinding Gear Games has taken immediate steps to bolster security. They have implemented stricter IP restrictions and prohibited the linking of third-party accounts to staff accounts. The developers expressed deep regret for the security lapse and emphasized their commitment to preventing future incidents. "We have taken steps to ensure that there are more security measures around admin accounts so that this can not happen again... We are incredibly sorry for this lapse in security," they stated in their official forum post.

The community's response on the forum has been mixed, with some players appreciating the transparency of Grinding Gear Games while others suggested the implementation of two-factor authentication (2FA) to enhance account security. Although the addition of 2FA remains under consideration, players are encouraged to change their passwords and remain vigilant about their account information in the meantime.