Stolen Path of Exile 2 admin account used to hack player accounts

Path of Exile 2 developers confirmed that a compromised Steam-linked administrator account was used to reset player passwords and access at least 66 player accounts, enabling theft of valuable in-game items; attackers leveraged partial payment details to social-engineer a Steam support reset, and a backend bug that recorded password changes as editable notes allowed deletion of audit evidence while limited log retention prevented full scope analysis.