EA Investigating Hacking of FIFA Ultimate Team Trader Accounts

In one of the most widely reported cases of its kind, EA Sports has been investigating a hacking attack that resulted in thousands of FIFA Ultimate Team trader accounts being compromised.

The “fifa ultimate team” is the most popular football game on the market. However, EA has been investigating reports of hacking of FIFA Ultimate Team Trader Accounts.

EA-Investigating-Hacking-of-FIFA-Ultimate-Team-Trader-Accounts Image: EA

EA is looking into claims of hacked FIFA Ultimate Team trader accounts being cleared out. The criminals seem to be using a kind of identity theft to dupe EA employees into providing email addresses and password reset links over live chat. So far, more than a hundred complaints from impacted users have been made.

FUT Donkey, a user who goes by the handle FUT, has threatened to sue EA for violating data protection regulations, alleging that EA personnel provided a random individual information about the account, enabling them access.

I notified EA live chat two times that they should add comments to my account stating that my account was being targeted by hackers and that no information should be changed, and they still did it. There was nothing more I could have done, and to be honest, I shouldn’t have had to. It’s fundamental security, and it’s horrible.

January 5, 2022 — FUT Donkey (@FUTDonkey)

The attackers also seem to be pestering EA support until they have the information they need. FUT Donkey shared a snapshot of their email history, which showed the attempts.

People were spamming the livechat with requests to modify my account information until some inept adviser eventually handed them the account photo. twitter.com/jqOoKKcv6s

January 5, 2022 — FUT Donkey (@FUTDonkey)

The attacker also created new accounts all across the internet, according to FUT Donkey. They discovered multiple new accounts utilizing the stolen credentials on sites ranging from IMDB to Quora to other porn sites. Despite the usage of a two-step authentication app, a very strong password that is changed on a regular basis, and other safeguards, this is the case.

EA gave my email account to some random man without any kind of authentication, and he used it to join up for a bunch of odd websites like IMDB, Quora, Pornhub, and so on. These people are breaching GDPR regulations and don’t seem to mind. pic.twitter.com/4WVHu7Zc2Z

— January 2, 2022, FUT Donkey (@FUTDonkey)

One individual compared it to locking their tools in a work vehicle and having the firm hand over the keys to a stranger on the street. “Recent account takeover attempts have been brought to our attention, and we are presently investigating,” EA added.

Eurogamer is the source of this information.