Reports Of Electronic Arts (EA) Data Breach Surface, EA Denies
EA denies reports of a data breach. According to the online and console game retailers, there is no evidence that a list of user and credentials appeared on Pastebin.
The company, nevertheless, has taken precautions. EA moved to secure the accounts where EA or Origin user ID matches the usernames on the supposed leaked list.
Security-focused website CSO first reported the breach, stating the breach included EA usernames, passwords, emails and a list of each user’s games. An apparent victim reported the breach to the website.
“Once I’d taken a look at the dump it seems linked to my EA account – a full list of my games appears to be there, along with the email address on the account and password,” the gamer told Salted Hash. CSO explains the reported order of events:
At about 3:00 p.m. on Thursday, a gamer who has asked that his name be withheld, got a password reset notification for an old Skype account. A few moments later, there were five additional password reset requests from Dropbox.
Soon after, the gamer got an email from someone who spends their time sending notifications to people who have had PII exposed online in data dumps. The message, from “urhack.com” contained his EA password in plain text and a link to the Pastebin post.
In 2014, EA made public a prior breach that affected more than 40,000 forum members. EA noted in a statement:
“Privacy and security is our top priority at EA. At this point, we have no indication that this list was obtained through an intrusion of our account databases. In an abundance of caution, we’re taking steps to secure any account that has an EA or Origin user ID that matches the usernames on this list. As always, we encourage all players to safeguard their account credentials and use unique usernames and passwords on all online accounts.”
CSO highlights that some accounts on Pastebin were leaked in other data breaches, like Adobe, Patreon, the Bitcoin Security Forum Gmail dump and so on.
Electronic Arts recently announced it wanted to create its own big action game a la Grand Theft Auto or Assassin’s Creed.
“If you look at the biggest segment in our industry, which is action, we don’t have a lot,” executive VP of EA Studios, Patrick Söderlundadding, told IGN in an interview. “EA is not known to make gigantic action games like Assassin’s Creed or Batman or GTA or those types of games that are really big.” It also sounds like whatever the publisher is planning could well already be underway: “The strategic direction that we put in motion is to expand our portfolio more into that segment.” Unironically, having stated that he wants to copy rival games, he then adds that the idea is “to see what can we bring to gamers that maybe hasn’t been done before.”
Images from Shutterstock.