This is an automated archive made by the Lemmit Bot.
The original was posted on /r/pathofexile by /u/NoNet5188 on 2024-12-29 17:30:44+00:00.
I was doing some checking of my bank accounts following Christmas season and saw I had 4 charges for $30 POE supporter packs for poe2 early access on December 22,2024. I knew I didn’t make these as I bought a 60 dollar pack in November.
After sending support an email, ( still have not gotten back to me) I went through all the normal account security stuff and moved on.
Well today I’ve been seeing all these talks about peoples items going missing, and decided to see if it was at all connected to my issue.
I think it was, my characters are broke in the EA not a single div to my name and my max character was like 45 at the time of the breach.
However, on my Poe account if you login to the website, pay with PayPal is done through xsolla.
At one point I guess I saved my PayPal info here, and if I try to buy points it does it without me having to enter PayPal details.
Well, I checked on a different pc and logged into my Poe account and I could buy points with PayPal and never have to enter my PayPal details at all. Which is crazy to me since I have MFA on my PayPal , it usually sends me a text. I have since removed my PayPal from xsolla, but to be honest if this is how it works GGG needed MFA a long time ago.
So I’m guess my account was hacked, still not sure how,( guessing I either hit the fake poe2 trade site or i downloaded exciled exchange 6 hours before the breach) . Either way just figured I would warn you guys as I’m not even sure if GGG will give me the $120 back, since all the early access codes are used.
Edit: I actually double checked my browser history and noticed that I did not go to any trade sites until Christmas Day, so I don’t think I was phished on any weird sites. Which makes me suspect exciled exchange 2 since I can see I downloaded it 6 hours before I was hacked.
Either way i would suggest everyone to change their passwords, since you may have a poor character like me they may still have your account info and are waiting .
Also my poe account password was randomly generated and unique to it. So I’m positive it’s a Poe only issue.