JP — ITmedia
Unauthorized Logins to Square Enix Accounts Possibly Using Data Leaked from Other Companies; Forced Reset of All Account Passwords Under Consideration
Security1 min read
Square Enix said some of its accounts were broken into by people using stolen passwords from other websites. The company asked users to change their passwords right away.
What happened
Square Enix, a big game company, said on October 19, 2026 that someone logged into its Square Enix accounts without permission. The attackers used IDs and passwords that were probably leaked from other companies. This is called a 'password list attack'. The company asked people who reuse passwords to change them quickly.
Key facts
- Date announced: October 19, 2026
- Type of attack: password list attack, using passwords leaked from other services
- Accounts suspected of being hacked were locked and a notice was sent to the registered email address
- Users must reset their password before logging in again
- The company said it may reset passwords for all accounts if the attacks keep increasing
What is a password list attack?
Many people use the same ID and password on several websites. If one website is hacked, criminals can try those same login details on other sites. Using a strong, unique password for each site makes this much harder.
Why it matters
Square Enix has many players, so a break-in can expose personal information and let criminals misuse accounts. Even people who did not reuse passwords are at risk if their passwords are easy to guess, such as repeated letters or numbers or a birthday. The story is a reminder to make strong passwords and turn on extra protection.
What to watch
- Whether Square Enix resets passwords for all accounts
- How many accounts were affected
- Wider use of one-time passwords, which are 6-digit codes that change and are sent as an extra login step