Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [TECHNOLOGY]
2 clusters · 8 sources · 4 days · First seen · Last updated
Square Enix security incidents and service disruptions
Overview
Square Enix issued an alert regarding unauthorized access attempts to Final Fantasy XIV and Dragon Quest X accounts. The company identified the cause as credential stuffing, where third parties used email and password combinations obtained from external data leaks. Square Enix clarified that its internal systems were not directly breached, but it began restricting access to compromised accounts and advised users to implement One-Time Password (OTP) authentication.
Following these security concerns, the company performed emergency reinforcement work to mitigate two critical PHP vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619. This maintenance resulted in a temporary suspension of new logins. To compensate affected players, Square Enix announced four days of free game time for valid subscription packages, as well as extensions for certain in-game events and reward collection deadlines.
Entities
Timeline
-
[TECHNOLOGY] 4 sourcesFinal Fantasy XIV implements compensation after security-related login outage
Square Enix is providing four days of free game time and extending in-game events for Final Fantasy XIV players following a login outage caused by critical PHP security vulnerabilities.
-
[TECHNOLOGY] 4 sourcesSquare Enix warns of unauthorized access to Final Fantasy XIV accounts
Square Enix is warning Final Fantasy XIV and Dragon Quest X players of unauthorized access attempts using leaked credentials from other services. Users are urged to change passwords and enable One-Time Password
Sources
criticalhits.com.br · dexerto.com · gamebusiness.jp · gamespark.jp · otakupt.com · que.es · world-today-news.com · xboxdynasty.de