Epic Games taking on class-action lawsuit for 2018 data breach

A security breach discovered against Epic Games back in 2018 has undergone a class-action lawsuit.

Over 100 people were affected and signed off on the lawsuite back in 2018. Fortnite was exposed to XSS attacks and hackers could access personal information.

Now, these affected users want to take action against Epic Games. Polygon states that the claim against Epic by Franklin D. Azar and Associates reads that Epic didn’t maintain adequate security measures.

Epic did patch the problem back in 2019, but this wasn’t done quickly enough in a fashion that expressed concern for the affected users. In other words, the fix wasn’t done timely.

Malicious users could use XSS attacks by sending a page to a user through various Epic Games subdomain vulnerabilities.

After the page was accessed, a user’s account could be accessed without the user actually logging in. This would expose the username and password which could allow the attacker make fraud purchases.

David Wong

David Wong

Writer and journalist for almost a year. Doing this for fun. Learned a lot along the way. I'm interested in businesses and the moves they make, tech and how it changes the world, and of course, enjoy playing some video games! I enjoy console and PC, but mostly RPGs, FPS, and League of Legends.

Share your thoughts.