Securing your Paradox Account

[konbendith]

We have recently tracked attempts to maliciously access data from Paradox accounts. While no actual security breach has occurred in our systems, we’ve confirmed that a small number of accounts have been accessed, most likely without the users’ consent. As Paradox systems have not been compromised, this is likely due to the use of an externally compromised password for your account.

We have informed the users affected by email, so if you haven’t heard from us, it means your account is safe. We’ve also deployed measures to secure the affected accounts and prevent similar issues in the future. Payment information, including credit card numbers, are stored separately and have not been at risk.

If you’re using a password with a low level of complexity, or if you are using a username or password for your Paradox accounts identical to accounts on other systems this is a good opportunity for you to update your account with a stronger password.

Our recommendation is always to go with a unique password, complex enough to ensure proper security; generally, a series of multiple keywords is the most secure and easy-to-remember option. We recommend the use of a password manager and ensuring that you are not reusing passwords as a security precaution for the future.

 

[Krille]

Paradox should put in place 2-factor-authentication, it would greatly secure user accounts. Has there been a discussion of adding it?

Hi,

Adding MFA has been discussed and could be a great way to add more security to accounts. You're likely to hear more about security measures in the near future as we explore various options. We always appreciate additional input from our players.

 

[konbendith]

Thanks for letting us know. For some reason, I picture an attempted hack attack triggering flashing red lights and a WW2 air raid siren in the Paradox offices.

Damn, we're moving to the new office in Stockholm in less than two weeks, but I'm making an urgent request for adding that to our new floor!