During a recent interview, Grinding Gear Games disclosed a data breach involving 66 Path of Exile accounts due to a social engineering attack on an outdated Steam profile. This profile was linked to an admin account but had been neglected and remained unsecured.

Key Information Accessed

Details such as IP addresses, shipping addresses, emails, and Steam IDs were accessed. The breach was exacerbated by a bug within the studio’s audit log system, permitting the hacker to reset passwords across multiple accounts.

In addition, personal details like transaction histories and private messages were potentially viewable, raising serious privacy concerns. The developer assured that immediate measures have been implemented to enhance security protocols around admin accounts.

A statement from Rogers emphasized, **“We are incredibly sorry for this lapse in security. Measures that should have been in place will be reinforced to prevent any recurrence of such incidents.”

In light of this event, players are advised to update their passwords and ensure two-factor authentication is in place, as Path of Exile currently lacks this feature.