Data Breach Notification

so this was all done by just a one dude to hack all those accs?

It physically hurts how some people refuse to read and understand the GGG post on this topic.

Investigator: The fence had a whole which made it easy for the attackers to get access to the factory.
Victims: If only the door would have been more secure.

So your stupidity and lack of elementary knowledge about security(no internal vps, no 2fa etc.)lead to ppl got their items stolen(by one of your employee account) and now you refuse to make things right and check in log what has beed stolen on that 66 accounts and give it back. For all hacked ppl, if ggg dont want to give back your stolen items which have real value coz u put houndreds of hours to grind them.(easy to prove in court market value of those items). You should go to police and made a case for ggg. If they want to protect thiefs(for example removing thief account name from forums and provide him anonymity which mean they are complicit in hes criminal proceder. They should also face consequences. (They didnt ban him for weeks and they know who is he)I dont give a f about they item recovery policy. You fu.. up so now you are forced to make it right. If u dont want to, there are courts who will force them to make things right and also will invastigate company security breaches and put fines for ensuring the security of customer data. If someone think they are above law and dont need to compensate for fuk ups they did they are just out of touch with reality.

Its 2025 guys. Security is not a new phenomenon in the world of IT... you need to do better.

"

derilzdota#2658 wrote:

I got hacked by this admin account for sure. No one trying log-in anywhere but only poe2. 2FA didnt work and dude just come and takes what he want, lost that day about 500divs in gear+ about 200 in currency it was dec19. Since than i message support and provide info what they asked for, they lock me in 3 days, and after they never back to answering... Lost my hope, not gonna wait answer anymore. Maybe they finally answer for email they asked for in couple months. So guys look at customer view, you got hacked, you email, you get locked, you wait more than 1 month. How good is it feeling? And biggest problem, it's not your fault you get hacked.

At this point you shoild take legal actions aginst them. Maybe if they will get few mil fines they will finally wake up

"

ibims111#7338 wrote:

It physically hurts how some people refuse to read and understand the GGG post on this topic.

Investigator: The fence had a whole which made it easy for the attackers to get access to the factory.
Victims: If only the door would have been more secure.

At this point GGG should pray really hard that some legal processes will not be opened against them.

Accounts were hacked in left and right from last year (just make a search on reddit and see how many complains are there).
So this whole in the fence is their responsibility and not ours.
And this statement that only 66 account were affected is one big bs.

"

Bubalame#1135 wrote:

So your stupidity and lack of elementary knowledge about security(no internal vps, no 2fa etc.)lead to ppl got their items stolen(by one of your employee account) and now you refuse to make things right and check in log what has beed stolen on that 66 accounts and give it back. For all hacked ppl, if ggg dont want to give back your stolen items which have real value coz u put houndreds of hours to grind them.(easy to prove in court market value of those items). You should go to police and made a case for ggg. If they want to protect thiefs(for example removing thief account name from forums and provide him anonymity which mean they are complicit in hes criminal proceder. They should also face consequences. (They didnt ban him for weeks and they know who is he)I dont give a f about they item recovery policy. You fu.. up so now you are forced to make it right. If u dont want to, there are courts who will force them to make things right and also will invastigate company security breaches and put fines for ensuring the security of customer data. If someone think they are above law and dont need to compensate for fuk ups they did they are just out of touch with reality.

right? always a smart idea to sue a million dollar company. just the lawyer fees would be your yearly salary. def not worth it for some pixels. police report itself won't do anything.

Maybe look into some options to implement Google 2FA if it's a problem to create your own system from scratch.

As someone who was a victim to this breach this is my insight

Im at fault for having a password on my POE account that was old and pawned in 2020. So i do not expect to get any compensation, as im also a majority of the problem of my acc getting hacked.

So what do i want now? I just want to know if they are gonna lock my account when they finaly get around to my response email, that states i got hacked and it was not me. And if my password change on my GGG and steam account was enough to make me safe.

If you whounder how i got hacked here are some pointers.

1. Password was pawned from earlier breach on diffrent website (Not GGG's fault)

2. I got e-mail on 29.des that my acc was accesed from diffrent location and locked down.

3. 2 Hours after e-mail, i log in to save the situation. all my gear is allready gone and my stash cleaned out of anything valuable.

4. Ive checked my e-mail avitivity and nobody have logged into my mail, my mail had diffrent password. And my mail have not been hacked.

5. Hackers used (most likely) my pawned password, logged in, then got locked out, then used the unlock code they had access too from the comprimised GGG account.

In sum 200div worth of gear gone, and i quit POE2 the 29.des. Will ressume when i know my messurements are enough, cba logging 200hours in 3weeks for it to be gone like that. Both my fault for shit pw, and GGG for letting someone unlock my acc when logged into from suss region.

To the whole situation after POE2 launching, there's a good example which is Mihoyo.

Before they launched Genshin Impact, they were considered as a small company, with only 7 billion dollor annual income and 0.2 bilion net income. When Genshin Impact breaks out, they got 7 billion dollor just the first three months. That's a four times income, and much more in the future years. It was a big change for the company, but also along with a lot of in-game situations, such as bug, irreasonable skills/story telling, account security, etc. The biggest contrariety came as the charactor Zhongli first lauching. He is the guardian god of Liyue, but his skill was so useless compare to the other god before him-Wendy, god of Mondstadt. They put two announcements in the next two weeks, trying to confort the main group of unsatisfied players, which is Chinese players, they take Zhongli as guardian god of China, and it's a shame that Zhongli is useless during any battle, not to mention in his PV it says "he is so powerful." After that two announcements they still can't find a job for Zhongli, and felt cheated and depressed. So they started a mission, reporting constantly to Consumer Protection Association for consumer fraud. On the other hand, reporting to Tax-bureau while they keep asking Mihoyo for paper invoice instead of digital invoice which if they can't provide in-time that's a tax fraud, and of course they can't provide paper invoice for billion amounts in a few days, as a small company they don't have lots of financial staffs. And after three days, even the govenment hotline operators would pick up the phone and ask in habitual"Is it Mihoyo you wanna report?" That is something would happen if you've got ten millions or more players. And it's finally ended with a really good announcement showed their sincereness, players get in-game compensation, and Zhongli get redesigned for two months, which players waited in paitience. After that we know Mihoyo became sucessful and it lasts still.

What I mean is players are easily mad but aslo easily satisfied, do as a big company will do before the contrariety comes, do good announcements not like a random office announcements, it's a key to players emotion. You are meant to be big company, so do as a big company, recruit more staff, do good announcements and give in-game compensation when situation comes, as gifts would never hurt your customer. Mihoyo survives not only because they provide good products but also they handle situation very fast and with sincere after the Zhongli accident.

I love your game, and with my sincereness, I want to see you become top tier company in the world and provide good games.