Data Breach Confirmed for Path of Exile 2

Summary

• Path of Exile 2 Developer Grinding Gear Games Confirms Data Breach: Grinding Gear Games announced a data breach affecting Path of Exile 2 during the week of January 6, 2025. The breach stemmed from a compromised developer's account linked to Steam.

• Compromised Information: The breach exposed player email addresses, Steam IDs, IP addresses, and additional data. The attacker accessed tools used by the customer support team, leading to the compromise of a significant number of accounts.

• Immediate Actions Taken: Upon discovering the breach, Grinding Gear Games locked the affected account and enforced password resets for all admin accounts. They identified and fixed a bug that allowed the attacker to delete logs, preventing future similar incidents.

• Security Enhancements: To prevent future breaches, Grinding Gear Games has implemented stricter IP restrictions and prohibited linking third-party accounts to staff accounts.

• Community Response: The community has mixed feelings, with some appreciating the transparency while others demand enhanced security measures like two-factor authentication. Players also seek improvements in game content and endgame difficulty.

• Game Updates: Path of Exile 2, following its early access release in December 2024, continues to engage players with regular updates. The latest update enhanced performance on PlayStation 5 and addressed issues with monsters, skills, and damage. A major patch is anticipated soon.

Grinding Gear Games is committed to enhancing the security of Path of Exile 2 and its predecessor, ensuring a safer environment for players as they enjoy the upcoming patch and future content.