Summary
- Path of Exile 2 developer Grinding Gear Games has confirmed a data breach that occurred during the week of January 6, 2025, caused by unauthorized access to a developer's admin account linked to Steam.
- The breach compromised sensitive player data, including email addresses, Steam IDs, IP addresses, shipping addresses, and unlock codes.
Grinding Gear Games has acknowledged a significant data breach in Path of Exile 2, which came to light after a developer's admin account was compromised. The breach was traced back to a developer's old Steam account used for testing, which was linked to their Path of Exile account. This allowed the attacker to access sensitive tools typically used by the customer support team. In response, the developers quickly locked the compromised account and enforced password resets across all admin accounts.
The breach affected a substantial number of player accounts, with compromised data including email addresses, Steam IDs, IP addresses, shipping addresses, and unlock codes. The attacker also managed to set random passwords on 66 accounts and delete logs due to a bug, which has since been fixed. While no passwords or password hashes were directly accessible, there was a potential risk of the attacker using compromised email addresses to bypass region locking on Steam-linked accounts. Additionally, the attacker could view transaction and private message histories.
Grinding Gear Games has taken immediate steps to bolster security measures, including disconnecting third-party accounts from staff accounts and implementing stricter IP restrictions. The community's reaction has been varied, with some appreciating the transparency, while others demand the addition of two-factor authentication and further security enhancements. Alongside security concerns, players are also seeking improvements in game content and adjustments to the endgame difficulty in Path of Exile 2.
Following its early access release in December 2024, Path of Exile 2 has continued to engage players with regular updates and developer communication. A recent update enhanced performance on PlayStation 5 and addressed issues with monsters, skills, and damage. With the next major patch on the horizon, Grinding Gear Games is committed to ensuring a secure and enjoyable gaming experience for its community.
