Data Breach Notification

My acc got hacked and I lost everything which worthing 1700d.
They get through steam 2FA.
I am really anrgry about this.

Thank you for posting such a detailed review of the breach! It takes guts to be so open about what went wrong.

I'll add to the cries for 2FA. It has been industry standard for years and years now, and as much as it sucks to take the time/energy to do it - a security incident like this that could have been avoided by having it will lose more customers than those that will leave out of boredom due to launch delays.

Oh, and, please please please please don't just force the shitty and almost worthless SMS version of 2FA on us! Authenticator is the only true security.

"

coldcandor#1709 wrote:

Thank you for posting such a detailed review of the breach! It takes guts to be so open about what went wrong.

I'll add to the cries for 2FA. It has been industry standard for years and years now, and as much as it sucks to take the time/energy to do it - a security incident like this that could have been avoided by having it will lose more customers than those that will leave out of boredom due to launch delays.

Oh, and, please please please please don't just force the shitty and almost worthless SMS version of 2FA on us! Authenticator is the only true security.

You do realize that this is mandatory?


Also they shouldnt force any 2FA on anyone and in reality even the most basic extra thing would result in more than enough security.

Even something as simple as changing login name from mail to a changeable and freely pickable account name would probably stop most common problems since by that it wouldnt be possible to just use leaked mails with passwords.


In general i dont get why changeable accountnames arent way more common. Nothing is worse than the e-mail as login since it already links a lot of data and gives information about the account that can be used to compromise it.

Any update on the timeline for 3.26?

you account does not have access to path of exile 2 early access? why i cant play it anymore from last night? is this conected with hacks u geting? please answer somone

Someone please shoot the bot asking for Distopia security for game accounts.

We already have a mute 10 minute speech ban on PoE2 chat that anyone who's feelings gets hurt can press.

No need to bring more media/political crap into the game.

I have never lost an acount from it being hacked, only ever from unrequested badly managed company security.
I know a guy that lost 2 accounts being hacked, but hes a loser who buys RMT which is pretty much a postcard requesting to be hacked.

They just needed to not have admin access floating aroung with onecent people and streamers.

"

Crazyserb#3810 wrote:

you account does not have access to path of exile 2 early access? why i cant play it anymore from last night? is this conected with hacks u geting? please answer somone

There are many of us in the same situation.
And no answer from GGG.

Posting today to show my disregard for GGG practices with not highlighting and not positioning Data Breach Notification statement to be visible on top of websites/socials/in-game clients of both Path of Exile 1 and 2.

Even more sad part is i only get to know (TODAY, while actively playing both Path of Exile 1 and 2 games and visiting websites of both) about Data Breach Notification statement from non-official site which had info about data breach pinned on top of their site! Can believe? Amateur site cares more about us all getting PROPERLY informed!

So yep, its me calling GGG actions bullguano on top of kiwi's head hidden in sand away from problems for so damn long.

I continue to find it hilariously obvious who benefits and why it can't be fixed. I kinda refuse to believe players passwords would be that easy.

No poe2 here, and my account isn't touched. I bet every acct without poe 2 is untouched also. 1700D? They know where it is, obviously, and who has what. Everything I see it isn't chump change, unless it is, like 1D missing, but it's right away, other accts seem to be allowed to farm up, then rob. Oh and, it's never happening to any popular streamers, ever.

2FA does not matter when WHO has the Auth KEYS? (to everything) WHO has been aggressive on the world stage and who's morals isn't it below? Who benefits when your acct gets rick rolled and you have to buy or play over again?

If really true, which just seems susly obvious to me, GGG should investigate no matter how schizo it sounds. GGG could have legal standing to get it solved.

Definitely not the guys with the keys, no way, right?

Can you at least implement a log in our accounts to see the activity?