2K Says User Data Stolen and Sold Online After Support Desk Hack

2K suffered a data breach in September when hackers got their hands on the company’s support desk. The hackers impersonated the company, and got access to personal data of users.

In an update to the situation, the company has revealed in an email to affected customers that their data has been stolen and sold online.

Hey folks, please read an important message from our Customer Support team. Thank you. pic.twitter.com/yKI18eL7mY

— 2K Support (@2KSupport) September 20, 2022

“We are contacting you to let you know that an unauthorized third party gained access to, and a copy of, a limited volume of your personal data held in 2K’s helpdesk system and made it available for sale. We want to emphasize at the outset that keeping personal data safe and secure is very important to us, and we deeply regret that this has happened,” the email reads.

It continued, “Following further investigation, we discovered that the unauthorized third party accessed and copied some of the personal data we record about you when you contact us for support: the name given when contacting us, email address, helpdesk identification number, gamertag and console details. There is no indication that any of your financial information or password(s) held on our systems were compromised.”

2K also said they don’t believe the people behind the hack have accessed or copied any information of their players, but they still recommended users who clicked on any links sent by the support portal to change their passwords.

There was also an email sent to certain players that asked players to click on a malicious link under the guise of providing a software update from 2K.

For anyone who clicked any links sent via email from 2K support while its portal was hacked, the company recommends “restarting your computer immediately and employing cybersecurity best practices, resetting all your passwords, using multi-factor authentication (MFA), and using updated anti-virus software.” The company said there is a possibility of credential theft if you interacted with the email.