For a brief time earlier today, if you had a support ticket open at the Bethesda website, you could see other support claims in progress. As in all of them – every single support claim filed by every single user of the site, complete with names, addresses, and other personally identifiable information. The issue has been fixed, but it remains a distressing breach of security.
The leaked info also included proof of purchase images used in those canvas bag replacement claims for Fallout 76 – you had to send a picture of a receipt in to get your replacement. That receipt could potentially include information like a credit card number. That’s a very bad thing. The bag replacement tickets would also include your name and shipping address.
This bug was reported by myriad players over the afternoon, with users on Reddit, Twitter, and the official forums describing pretty much the same experience. One says to “please rest assure I have no desire to stalk you or mess with your Fallout 76 experience,” though players remain understandably concerned that not everyone who got access to this info will be so nice.
Bethesda’s support site went down for maintenance around the time these issues were reported, and company reps say the issue has been fixed. Though, again, not before a whole lot of personal info was accessed by a whole lot of unauthorised users.
Hi there, thank you for reporting this. The issue has been resolved.
— Bethesda Support (@BethesdaSupport) December 5, 2018
When Bethesda offered to send out canvas bag replacements for those who bought the Fallout 76 Power Armor Edition, I’ll admit that I thought the problems were resolved and the saga of the canvas bag was done for. Clearly, that belief was a naive one.
Source