Summary
Path of Exile 2 Developer Grinding Gear Games Confirms Data Breach: Grinding Gear Games announced a data breach affecting Path of Exile 2 during the week of January 6, 2025. The breach stemmed from a compromised developer's account linked to Steam.
Compromised Information: The breach exposed player email addresses, Steam IDs, IP addresses, and additional data. The attacker accessed tools used by the customer support team, leading to the compromise of a significant number of accounts.
Immediate Actions Taken: Upon discovering the breach, Grinding Gear Games locked the affected account and enforced password resets for all admin accounts. They identified and fixed a bug that allowed the attacker to delete logs, preventing future similar incidents.
Security Enhancements: To prevent future breaches, Grinding Gear Games has implemented stricter IP restrictions and prohibited linking third-party accounts to staff accounts.
Community Response: The community has mixed feelings, with some appreciating the transparency while others demand enhanced security measures like two-factor authentication. Players also seek improvements in game content and endgame difficulty.
Game Updates: Path of Exile 2, following its early access release in December 2024, continues to engage players with regular updates. The latest update enhanced performance on PlayStation 5 and addressed issues with monsters, skills, and damage. A major patch is anticipated soon.
Grinding Gear Games is committed to enhancing the security of Path of Exile 2 and its predecessor, ensuring a safer environment for players as they enjoy the upcoming patch and future content.