The EAe.ea.com Breach Put 486 Stolen Email and Password Pairs Online

HEROIC analysts identified this stealer log on 19-Apr-2024. The breach exposed 486 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as EAe.ea.com.

Why This Is Dangerous

EA accounts on ea.com hold access to purchased games, downloadable content, in-game currency, and any payment methods saved to the account. When EA login credentials are stolen and exposed in plaintext, attackers can immediately access the account, download purchased content, make in-game purchases using stored payment methods, and lock the legitimate owner out by changing the password and recovery email. Beyond gaming losses, victims who reuse their EA password on other sites face risks to their email, banking, and social media accounts.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

Gaming accounts with stored payment information are valuable targets for cybercriminals. Stolen EA credentials from this breach can be sold in underground markets or used directly to access accounts and make fraudulent purchases. Because the passwords in this leak are in plaintext, no technical skill is required to use them. Anyone who shares their EA password with another service is also at risk of that account being compromised through credential stuffing.

How a Stealer Log Works

A stealer log is created by malware that runs silently on a victim's computer. The malware captures stored passwords, browser login sessions, and website URLs, then transmits everything to the attacker. The collected data is compiled into a log file and shared in private Telegram groups, where criminals use it to attempt unauthorized logins on gaming platforms and other services.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records from known breaches. Search your email address now to find out if your credentials appear in this breach or others. The scan is free and takes seconds.