Path of Exile 2 Confirms Data Breach

Path of Exile 2 Developer Addresses Data Breach Affecting Player Information

Grinding Gear Games, the developer behind Path of Exile 2, has confirmed a data breach that occurred during the week of January 6, 2025. The breach stemmed from a compromised developer account linked to Steam. A significant number of player accounts were affected, resulting in the exposure of sensitive information.

Compromised Data: The breach exposed email addresses, Steam IDs, IP addresses, shipping addresses, and unlock codes. While passwords and password hashes were not directly accessible, the risk of credential stuffing remains a concern. In some cases, transaction and private message histories were also viewed.

The Breach: An attacker gained access to a developer's admin account, granting them access to the Path of Exile 2 customer support portal. This allowed the attacker to view account details and, in some instances, modify account settings, including changing passwords on 66 accounts. A subsequently discovered bug allowed the deletion of logs tracking these changes; however, this bug has since been patched.

Grinding Gear Games' Response: The developer immediately took action upon discovering the breach, locking the compromised account and initiating password resets for all admin accounts. A thorough investigation followed, revealing the compromised account's link to an old Steam account used for testing purposes. To prevent future incidents, Grinding Gear Games has implemented stricter security measures, including eliminating the ability to link third-party accounts to staff accounts and significantly tightening IP restrictions.

Community Reaction: Player reactions have been varied. While some commend the developer's transparency, others advocate for the implementation of two-factor authentication and further security enhancements. Concerns regarding endgame difficulty and overall game content have also been raised.

Moving Forward: Grinding Gear Games is committed to improving account security and preventing future breaches. The company is actively working to address player concerns and enhance the overall security posture of Path of Exile 2. The recent performance improvements and upcoming major patch demonstrate their ongoing commitment to the game and its player base.