Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

"

taosk8r#2478 wrote:

"

PoE#8983 wrote:

Seems like you got hacked thru your outdated Steam account info.

If your theories are correct here (and I would assume GGG knows one way or another by now), this begs the question: Is it even possible at this point to prevent it from happening in the future without something drastic like forcing pw resets on every account?

In regards to the theory of Fightgarr being hacked through his steam account; its the only thing that explains all the facts.

There is no reasonable way for GGG to prevent something like this, it's on the account owners.


Sadly, I'd argue its borderline impossible to keep your PW hidden over a long period of time, if its not unique.

Here are some tips:
EMAIL:
enable 2FA
Unique password
Make it an email that does not use any similar alias / make it random and not related to poe.
Do not use the email for anything other than Path of Exile.

GGG Account:
use a PW manager, make sure your PW is unique and change your password regularly.
Remove all secondary login methods

"

PoE#8983 wrote:

There is no reasonable way for GGG to prevent something like this, it's on the account owners.

I guess your contention is that forcing a gamewide PW reset is unreasonable (ofc, they would have to hold resets from any emails that bounced, and Im not sure how they would ultimately handle restoring access to those, perhaps through purchase information, which can be more than a challenge for many people to successfully collect), but mine is that this cannot be allowed to continue, the harm is too great to the trust of the players, their faith in the company and that their hard work will lead to lasting rewards, and the general reputation of the company, so there is no action that is too great to protect their accounts from future attacks.

It isnt an unprecedented thing that other companies havent done.

so far it seems there have been less hacked victims for 2 weeks no new info found so far yet

Got hacked around a week ago, but only realized yesterday, because I haven't really played. The person hacking stole all gear from all characters, and all more valuable currencies, both from league and standard. The person managed to somehow break into my e-mail, and changed the password to the game through there. They've also managed to get into discord and attempted to get into Facebook. I had a strong password, never gave my info to anyone and never clicked on any shady links. I'm playing on the stand alone version of the game.

On 15-11-2025,
My POE account was hacked while I was away for only 3 hours, and all of my valuable items and currency were taken.
I play through Steam with 2FA enabled, yet I received no notifications, no requests and there were no unusual login logs on Steam.
For clarity, I do use some third-party tools, but I am not claiming that they caused the issue.
These are the tools I use:
- Path of Building
- Awakened Trade
- Wealthy Exile
- POE Ninja
After several email exchanges with GGG Support, the only outcome was changing my email and password, that’s all.
There was no explanation or information provided regarding how the hack occurred, which makes me feel unsure about the safety of continuing to play.

It has to be price checking stash tab tools , I got it installed several days ago and got hacked few days after that, no other way it is something else, GGG investigate them , somehow they get access to the email of you account via steam and then if the email has no 2FA it you hacked via mail -> steam account and finally they steal your items , also the items they stole from me were items that were shown in wealthy exile as expensive they did not take my rare jewels which are really pricy.

I never had 2FA on my email for 5 years . Also only poe items were stolen while in my account I had way more valuable things in other games

I wanted to let everyone know that I logged into my account today a few hours after finishing a game and found that my character and currency stash had been emptied. I have nothing of value, and Steam isn't showing any login alerts or anything, like I'm just a ghost. Has anyone else experienced this? Were you able to resolve it? I'm completely out of the game in this league.

My account was hacked today. All of my equipment & div are all gone. Can someone from GG help please???

"

Pitpot841#5161 wrote:

My account was hacked today. All of my equipment & div are all gone. Can someone from GG help please???

The answer to that is likely to be a resounding no. Given you're able to post on the forum, It would seem that you have retained access to the account itself, so the suggestion would just be to secure it as best you can (i.e changing passwords) if you haven't already.

GGG have a blanket policy to not restore lost items under ANY circumstance in order to prevent abuse cases or a customer support nightmare associated with dealing with all of those types of requests on a case by case basis.

Was informed by ABVT#0013 last year , that my account was affected, they took a lot of time to go through hundreds of remove only tabs.

I only checked because I received an e-mail about a data request I never requested. But I also received another unlock code e-mail on 4th Jan 2025.


So here are my 2 cents. There was an earlier breach to 2024/2025 where the attackers acquired login tokens. I received an e-mail years ago that my account has been locked when I haven't logged into the Path of Exile since some Cutthroat Race that was before Act 4 was released. Checking the stashtabs I noticed some things missing already.


This time(2025) they moved pages, suddenly I have jewels in the inventory of a HC racecharacter moved to SC.

I don't play the game but TBH this is a major screw up. If GGG had any itemstransactionlogs they should use those. Not a single item I received as race reward has ever been traded. They were rotting in remove only tabs aside from the Beta Demis those were in a stash page. GGG should essentially ban all the first transaction log accounts including IP ranges and wipe the items.

For those playing: Feel free DM me if you see the Season 2 Demigod somewhere I want to play with the breacher and RMTer prior a bit. :)

RMT has been a bane of this game since closed beta and TBH I GGG should automatically change alt arts into their regular version and change them to a skins to kill their value. The only way to combat RMT is to render those items worthless.