500k Call of Duty accounts hacked; users’ information leaked due to Activision’s data breach

A severe security incident has affected users of one of today’s most popular videogames. Experts from a pentesting course mention that a possible hack has exposed the login credentials of around 500,000 Activision accounts, developers of the Call of Duty video game series.

The worst thing about the incident is that threat actors are changing the exposed passwords so that account owners can’t sign in.

At first only one Twitter user identified as “oRemyy” had reported the incident, although eventually other users and members of the gaming and cybersecurity communities confirmed the reports. Okami, another Twitter user, is the one who mentioned that the compromised accounts already exceeded half a million.

In an interview for the specialized platform TheGamingRevolution, a pentesting course expert mentioned that hackers are advancing at a rate of a thousand compromised accounts every 10 minutes, showing their advanced capabilities.

In an interview for the specialized platform TheGamingRevolution, a pentesting course expert mentioned that hackers are advancing at a rate of a thousand compromised accounts every 10 minutes, showing their advanced capabilities.

The main use of an Activision account is to log in to Call of Duty series titles, including Warzone, Modern Warfare and COD Mobile. These accounts also allow access to other Activision titles.

Experts in the pentesting course mention that at the moment there is only one method to protect these accounts, which is that users whose accounts have not been affected must change their password before hackers do. It is also advisable to reset the password of any other online platform.

In addition, gamer community members recommend unlinking any other services associated with the Activision account such as PSN, Xbox, or payment information.

At the moment Activision does not have mechanisms such as multi-factor authentication, so users will need to take a proactive stance to prevent an attack on their accounts. The company is not yet officially pronounced regarding this incident, although confirmation may arrive in the coming hours.

For further reports on vulnerabilities, exploits, malware variants, computer security risks and information security courses it is recommended to visit the website of the International Institute of Cyber Security (IICS), as well as the official platforms of technology companies.