Square Enix warns of unauthorized access to Final Fantasy XIV accounts

Square Enix has issued an alert regarding unauthorized access attempts to accounts for Final Fantasy XIV and Dragon Quest X. The company reported that third parties are attempting to log in using email and password combinations likely obtained from data leaks at other online services.

This method, known as credential stuffing, targets users who reuse the same login information across multiple platforms. Square Enix clarified that there has been no direct breach of its own internal systems. To mitigate the risk, the company has begun restricting access to accounts identified as compromised. Affected users will receive instructions via their registered email to reset their passwords and lift account limitations.

Square Enix has advised all players to change their passwords immediately, particularly if they use predictable sequences or reuse credentials from other sites. The company also strongly recommends implementing One-Time Password (OTP) authentication via mobile apps or physical security tokens to enhance account security. If unauthorized access attempts continue to rise, Square Enix may mandate a password reset for all its account holders.