Back in September, 2K reported that a third party had accessed its customer support service and issued a warning to users. The person had illegally accessed the credentials of its vendors for the helpdesk platform the company uses.
2K originally stated the hacker was using this access to send malicious links to some players and advised gamers to not open any links received during a certain time period. However, 2K now states that the third party also accessed confidential customer details and stole them. The information is now being sold online.
Posting to its website, 2K explains it has begun contacting customers whose information has been accessed and is now up for sale. The stolen information includes the email address, helpdesk ID number, gamertag, and console details. 2K notes that “there is no indication that any of your financial information or password(s)” has been compromised.
While there is no evidence that passwords have been stolen, 2K still advises users to reset their passwords just in case. The malicious link that was sent to some players did contain malware with the potential to steal passwords and other private information.