• The breach occurred back in 19th September when a vendor’s credentials were used to access the help desk platform.
• The breach saw an unauthorised third party send customers a malicious link.
• 2K has directed customers to a support page should they have concerns or queries.

Another week another data breach and this time it’s at 2K and it’s concerning.

The Californian publisher has sent emails out to customers warning that it experienced a breach on 19th September. The breach saw an unauthorised third party accessing the credentials of one of 2K’s vendors which were in turn used to access the help desk platform 2K uses.

“Following further investigation, we discovered that the unauthorized third party accessed and copied some of the personal data we record about you when you contact us for support: the name given when contacting us, email address, helpdesk identification number, gamertag and console details. There is no indication that any of your financial information or password(s) held on our systems were compromised,” 2K wrote to customers.

Perhaps most alarming, however, is the revelation that the bad actor sent out an email that purportedly contained a software update from 2K. That update was actually a malicious link that, “contained malware that had the potential to compromise data stored on your device, including passwords.”

The publisher says it has contacted customers who were sent those links although it didn’t detail how it is remedying that situation.

Furthermore, 2K has told customers to be on the alert for suspicious activity on their accounts following this breach.

However, this email was sent to a Hypertext staffer on Thursday. The news was however disclosed back in September so 2K has taken its sweet time alerting users to this breach.

Hey folks, please read an important message from our Customer Support team. Thank you. pic.twitter.com/yKI18eL7mY

— 2K Support (@2KSupport) September 20, 2022

This in and of itself is incredibly alarming as unless you’re keeping up to date with the 2K Support Twitter account or following a breadth of media outlets, you’d have to wait for a direct email from 2K to learn of the breach.

The publisher has told customers to visit this page and select “Email Notification October 6” should they require support.