Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

"

taosk8r#2478 wrote:

"

PoE#8983 wrote:

Seems like you got hacked thru your outdated Steam account info.

If your theories are correct here (and I would assume GGG knows one way or another by now), this begs the question: Is it even possible at this point to prevent it from happening in the future without something drastic like forcing pw resets on every account?

In regards to the theory of Fightgarr being hacked through his steam account; its the only thing that explains all the facts.

There is no reasonable way for GGG to prevent something like this, it's on the account owners.


Sadly, I'd argue its borderline impossible to keep your PW hidden over a long period of time, if its not unique.

Here are some tips:
EMAIL:
enable 2FA
Unique password
Make it an email that does not use any similar alias / make it random and not related to poe.
Do not use the email for anything other than Path of Exile.

GGG Account:
use a PW manager, make sure your PW is unique and change your password regularly.
Remove all secondary login methods

"

PoE#8983 wrote:

There is no reasonable way for GGG to prevent something like this, it's on the account owners.

I guess your contention is that forcing a gamewide PW reset is unreasonable (ofc, they would have to hold resets from any emails that bounced, and Im not sure how they would ultimately handle restoring access to those, perhaps through purchase information, which can be more than a challenge for many people to successfully collect), but mine is that this cannot be allowed to continue, the harm is too great to the trust of the players, their faith in the company and that their hard work will lead to lasting rewards, and the general reputation of the company, so there is no action that is too great to protect their accounts from future attacks.

It isnt an unprecedented thing that other companies havent done.

so far it seems there have been less hacked victims for 2 weeks no new info found so far yet

Got hacked around a week ago, but only realized yesterday, because I haven't really played. The person hacking stole all gear from all characters, and all more valuable currencies, both from league and standard. The person managed to somehow break into my e-mail, and changed the password to the game through there. They've also managed to get into discord and attempted to get into Facebook. I had a strong password, never gave my info to anyone and never clicked on any shady links. I'm playing on the stand alone version of the game.

On 15-11-2025,
My POE account was hacked while I was away for only 3 hours, and all of my valuable items and currency were taken.
I play through Steam with 2FA enabled, yet I received no notifications, no requests and there were no unusual login logs on Steam.
For clarity, I do use some third-party tools, but I am not claiming that they caused the issue.
These are the tools I use:
- Path of Building
- Awakened Trade
- Wealthy Exile
- POE Ninja
After several email exchanges with GGG Support, the only outcome was changing my email and password, that’s all.
There was no explanation or information provided regarding how the hack occurred, which makes me feel unsure about the safety of continuing to play.

It has to be price checking stash tab tools , I got it installed several days ago and got hacked few days after that, no other way it is something else, GGG investigate them , somehow they get access to the email of you account via steam and then if the email has no 2FA it you hacked via mail -> steam account and finally they steal your items , also the items they stole from me were items that were shown in wealthy exile as expensive they did not take my rare jewels which are really pricy.

I never had 2FA on my email for 5 years . Also only poe items were stolen while in my account I had way more valuable things in other games