Summary
Grinding Gear Games confirmed thatPath of Exile 2experienced a data breach after one of the developer’s admin accounts was compromised. ThePath of Exile 2developers also outlined its next steps to improve the security of their admin accounts and ensure breaches won’t happen again inPath of Exile 2and its predecessor, which players can both log into with one shared account.
Following its early access release in December 2024,Path of Exile 2has maintained a healthy player base thanks to a steady flow of updates and communication from the developers at Grinding Gear Games. One of the most recent updates improved the game’s performance on PlayStation 5 and fixed issues involving monsters, skills, and damage.Path of Exile 2’snext major patchis going to release soon, and Grinding Gear Games addressed the situation involving the data breach before players log back into the game and play the patch’s new content.
Grinding Gear Games’officialPath of Exile 2forumwas updated with a new notice from the developers, confirming that they became aware of the data breach on the week of May 20, 2025. An account with admin access to the website owned by one of the developers was compromised, giving the user access to tools thatPath of Exile 2’scustomer support teamtypically use. Shortly after this discovery, the Path of Exile 2 developers immediately locked the account and forced password resets for all other admin accounts. A subsequent investigation discovered that thePath of Exileaccount that was compromised was linked to an old Steam account that was used for testing, which gave the user enough information to steal the account. Although the Steam account didn’t have any purchases or personal information tied to the developer, access to the developer’sPath of Exileaccount meant that the user could affect other accounts through the developer portal.
Path of Exile 2 Developer Grinding Gear Games Confirms Data Breach Involving Compromised Staff Account
The attacker set random passwords on 66 accounts, and a bug allowed them to delete logs that showed where changes had occurred. Grinding Gear Games confirmed that the bug doesn’t exist for other support actions and has been fixed, but the breach allowed the attacker to view account information for a “significant number” of accounts on the developer portal. As a result, email addresses, Steam IDs, IP addresses, shipping addresses, and unlock codes were compromised.
Although no passwords or password hashes were viewable through the customer service portal, Grinding Gear Games said it was possible that the attacker could have compared email addresses against lists of compromised passwords from other websites to bypass region locking for accounts linked toPath of Exile 2on Steam. For some accounts in the breach, the attacker was able to look at transaction history, along with private message history from Grinding Gear Games staff. To prevent this breach from happening again, third party accounts can no longer be linked to staff accounts, and there are “significantly more stringent” IP restrictions.
The community’s response to the breach has been mixed, with some players praising the developers for being transparent about the data breach, while others are calling for two-factor authentication to be added toPath of Exile 2accounts. It’s clear that a notable portion of the player base would like to see some improvements to security and in-game content, along with adjustments toendgame difficulty inPath of Exile 2.
Path of Exile II
WHERE TO PLAY
Path of Exile 2 is a next generation free-to-play Action RPG created by Grinding Gear Games. Journey across the deadly continent of Wraeclast, meeting multiple immersive cultures while facing off against evil in many forms. Path of Exile 2 features twelve character classes, 240 Skill Gems, hundreds of equipment base types, a six-act campaign, more than a hundred unique boss fights, a deep endgame system and so much more. Play with your friends without losing any progress with couch co-op, cross-play and cross-progression.
