Pokemon Resets Accounts With Detected Hacking Attempts

The Pokemon Company has started to reset some of its user account passwords after detecting several hacking attempts.

Pokemon's official support website detailed that affected accounts have been proactively locked and users must rest their passwords to log in to their Pokemon Trainer Club account.

Pokemon Confirms Hacking Attempts but Says no Breach

The Pokemon Company spokesperson explained that the alert was done after experiencing attempts to log in to some accounts. However, the company clarified that the account system was not compromised and no accounts were breached.

"What we did experience and catch was an attempt to log in to some accounts. To protect our customers we have reset some passwords which prompted the message," said Daniel Benkwitt, Pokemon Company spokesperson.

In addition, Benkwitt also shared that only 0.01% of the accounts have been affected by the hackers. He also reiterated that these users must reset their passwords to continue playing, while unaffected accounts are not forced to reset their passwords.

Pokemon Hacking Attempt Links to Credential Stuffing

Tech and gaming companies are often targeted by breaches. It is suspected that the threat actors tried to do credential stuffing wherein hackers will use stolen usernames and passwords from other breaches and reuse them on other sites.

"Following an attempt to compromise our account system, Pokémon proactively locked the accounts of fans who might have been affected," the company wrote as an alert. The notification was quickly removed from the support website hinting that the issue has been resolved already.

Pokemon is a popular game franchise with hundreds of millions of players around the world. As a basic precaution account holders must routinely change their passwords on a regular basis to avoid getting targeted by hackers.