Epic Games has become the subject of a class-action lawsuit in the wake of a security breach that may have let hackers in on Epic Account holders personal data last year.
The suit was filed by Franklin D. Azar & Associates, as reported by Polygon. And the matter involves over 100 class members, with the basis of the claim stemming from Epic failing to “maintain adequate security measures and notify users of the security breach in a timely manner.”
Epic didn't acknowledge the issue until January, two months after a Fortnite bug possibly laid gamers' personal account information bare. The hack is what's known as an XSS attack and only needs a user to click a link for their username and password to be exploited. Epic did sort the problem out but, according to the suit, account holders were not informed of the breach.
“[A]ffected Fortnite users have suffered an ascertainable loss in that they have had fraudulent charges made to their credit or debit cards and must undertake additional security measures, some at their own expense, to minimize the risk of future data breaches including canceling credit cards associated with their Epic Games/Fortnite accounts and changing passwords for those accounts,” a statement from said firm reads.
“Furthermore, Fortnite users have no guarantee that the above security measures will in fact adequately protect their personal information. Fortnite users therefore have an ongoing interest in ensuring that their personal information is protected from past and future cybersecurity threats.”
“You may have a claim against Epic Games if you have an Epic Games or Fortnite account, a credit or debit card linked to that account, and incurred charges on that linked card that you did not authorize or recognize," they tell players who may have been affected.
Both parties were contacted for comment by Polygon. The law firm had not responded at the time of writing while Epic declined to speak on the matter.