Square Enix Locks Accounts After FFXIV Login Breach
The leak did not originate inside FFXIV, but Square Enix is now spending account enforcements and password resets on credential reuse that the game cannot patch out of its users.
Reporting from 2 sources: GAME Watch (Impress), Denfaminicogamer.
Square Enix published a notice on the Final Fantasy XIV Players' Site on October 19, warning that unauthorized logins have been confirmed using IDs and passwords believed to have leaked through frequent personal information breaches. Accounts believed to be already compromised face login restrictions, with an email sent to the registered address explaining how to lift the restriction and change the password. The company also recommends two-factor authentication through a security token or free apps such as Google Authenticator or Microsoft Authenticator.
The fix is not a client update. Logins are being blocked on accounts Square Enix believes are already compromised, and the recovery path runs through the registered email: users lift the restriction there and set a new password before logging back in.
The notice points players toward security tokens and free authentication apps, including Google Authenticator and Microsoft Authenticator. The company also asks for immediate password changes where leaked email addresses, account IDs, or passwords match an FFXIV account.
Synthesized by Yomimono from the 2 cited sources below, including Japanese-language reporting where cited, then editorially reviewed before publishing.
Sources
- GAME Watch (Impress) 「FFXIV」が不正アクセスとアカウント管理に関する注意喚起を発表
- Denfaminicogamer 『FF14』公式がスクウェア・エニックス アカウントに不正ログイン発生と注意喚起。他社サービスで流出したとみられるIDとパスワードの“使い回し”が狙われる