Data Breach Notification

"

DemonicEnlightenment#4671 wrote:

So is GGG doing nothing for the people that were affected by this?

"

Cocofang#3395 wrote:

"

Beverice#3588 wrote:

Will people who have had their accounts lost or items stolen receive support in getting those back?

"

PoE#8983 wrote:

How is this a response?

What happens to the items they stole? This is on GGG.
You said they looked at a significant amount of accounts information.

How are we supposed to protect our accounts now that someone could possibly have all the information needed to recover the account through support.

"

For those accounts they got access to the following private information:
Email Address if the account had one associated
Steam ID if the account had one associated
IP Addresses that the account had used
Shipping address if the account had previously had physical goods sent
Past purchases

This is all the information needed for someone to recover an account through Support. What is anyone supposed to do if they were one of the people?

It was a support-admin account the attacker hijacked. The GGG support does not have your passwords. What the attacker could do is compare mails with known compromised account databases that use the same password everywhere.

GGG cannot fix people too lazy to use unique passwords.

Guys, please ...

"

Xirav79#6285 wrote:

I'm not affected but how are you planning on compensating the affected accounts after all this was your error.

"

mbitsu#0616 wrote:

what a shame.
Under KRIS this didn't happen.
And now that you have new owners and all the resources of the world, you let the Thief into your garden so easily.
But don't worry, relax, it's Christmas holidays right? Peace and love to all. (and dupes)

"

It is probable that the attacker would be able to compare email addresses found using our portal against publicly available lists of compromised passwords from other websites in order to find accounts that shared the same password with their PoE account. If that was the case, they would have been able to bypass the region locking using the unlock code.

"

bilboreily#3998 wrote:

Could someone clarify what this means?

"

It is probable that the attacker would be able to compare email addresses found using our portal against publicly available lists of compromised passwords from other websites in order to find accounts that shared the same password with their PoE account. If that was the case, they would have been able to bypass the region locking using the unlock code.

If the attackers already viewed unlock codes for some accounts then why do they need to find compromised passwords for other websites? How do other website accounts aid in bypassing a region lock?