In late 2018, attackers could potentially take over a Fortnite account by tricking a player into clicking a phishing link that stole an Epic Games sign-in token. Epic patched the vulnerabilities within weeks of their disclosure, according to contemporaneous reporting; this is a historical incident, not evidence that the same flaw is active today.
How the Fortnite account vulnerability worked
Check Point Research described a weakness in Epic’s web login and token-handling infrastructure—not a Fortnite cheat, downloadable mod, or ordinary game-client bug. The attack combined phishing with a flaw in the single sign-on (SSO) sign-in flow.
In the researchers’ account, a redirect could send authentication data to a vulnerable Epic subdomain, where injected JavaScript could capture the sign-in token. A malicious link might be presented as a Fortnite offer or a chance to get free game credits. The player’s key action was clicking the link; Check Point said the described flow did not require the player to enter login credentials afterward. Check Point Research’s January 16, 2019 report explains the technical chain.
WIRED described three flaws that could be combined: a flaw in a legitimate Epic URL, an SSO redirect issue, and a database query flaw. Someone holding the stolen token could access the account and information stored in it, make in-game purchases, and access or record in-game conversations. These were capabilities of the reported attack, not proof that every capability was used against victims.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- 8-piece game-themed figurines – This figurine set contains 8 game characters, each with a unique weapon, perfectly restoring the classic game image, suitable for collection and display.
- High-quality materials & exquisite details – Made of high-quality environmentally friendly PVC material, it feels smooth, non-toxic and odorless, and the fine carving and coloring process make the characters lifelike.
- Multi-purpose collection ornaments – Suitable for game enthusiasts to collect, birthday gifts, cake decorations, party decorations, desktop ornaments, etc., to add a personalized atmosphere.
- Perfect gift choice – Suitable for relatives, friends, game fans and collectors, suitable for various holiday occasions such as birthdays, Christmas, Children's Day, etc.
- Moderate size, easy to place – The height of the figurine is about 5in, suitable for placing on desks, cabinets, display racks, etc., so that you can enjoy your favorite game characters at any time.
When it happened—and what is known about impact
WIRED reported that Check Point disclosed the issues to Epic at the beginning of November 2018 and that Epic patched them a few weeks later. The vulnerabilities were publicly described in January 2019. WIRED also cautioned that another party might have discovered the attack before Check Point. The reviewed reporting does not establish confirmed exploitation, a victim count, or realized financial losses.
WIRED noted that Fortnite had topped 200 million registered players by the end of 2018. That is a historical scale figure, not a current user count and not an estimate of how many accounts were affected. For the disclosure and patch chronology, see WIRED’s January 16, 2019 report.
Rank #2
- UNLOCK VICTORY ROYALE SERIES: Unlock the Fortnite universe in the real world with the Victory Royale Series! Upgrade your collection with premium figures based on the Fortnite video game. You never know who’s dropping next, so ready up!
- SHOW YOUR STYLE: What lies behind that sinister smile? This 6-inch Metal Mouth action figure shows the fan-favorite character outfit in game-level detail, taking the on-shelf Battle Royale to the next level!
- EXPAND YOUR LOCKER: Comes with 2 Spiked Mace Harvesting Tools, Catalyst Back Bling, and weapon accessories. Mix and match accessories between figures (Each sold separately. Subject to availability)
- POSE WITH PERSONALITY: Pose out the Metal Mouth figure in an epic battle stance or bust a move in a dance emote with more than 20 points of articulation!
- UPGRADE YOUR COLLECTION: Look for other Fortnite Victory Royale Series figures to level up your collection! (Each sold separately. Subject to availability)
How to protect your Epic account now
For current account security, Epic recommends steps that address phishing, password reuse, and access through linked accounts. Its guidance is not evidence that the 2018 flaw remains exploitable.
- Use a unique password. Epic suggests considering a password manager to generate and store strong, distinct passwords.
- Turn on two-factor authentication. Epic lists authenticator apps (recommended), SMS, and email as options. Enable 2FA on linked accounts too, since access to those accounts can provide a route into your Epic account.
- Sign in through official channels. Use official Epic websites or apps rather than links in unexpected messages, and be wary of suspicious links and attachments.
- Do not trust unofficial free V-Bucks offers. Treat offers that ask you to sign in through an unfamiliar link as a potential phishing attempt.
- Keep devices and security software updated. This is general device hygiene; it does not fix a server-side login flaw.
Epic’s account security guidance lists its current recommendations and 2FA methods.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #3
- GILDED TROOPER: Board the Battle Bus and drop in with Fortnite Legendary Skull Trooper (Gilded)!
- FORTNITE: 6-inch action figure is inspired by the video game Fortnite
- ARTICULATED: Feature 28 points of articulation to win any Battle Royale
- ACCESSORIES: Comes equipped with Back Bling and Harvesting Tools
- BONUS CODE: Code for virtual item included: Mecha-jolly
What to do if your Fortnite account was compromised
If you suspect someone has accessed your Epic account, secure the email account associated with it first. Then use Epic’s recovery route; access to that email may be essential to securing the Epic account.
- Secure your email account. Change its password and review its security settings, including two-factor authentication.
- Try resetting your Epic password. If you can still access the account’s email, use Epic’s password-reset process.
- Try a linked sign-in. If password reset does not work, Epic advises trying a linked console or social account.
- Submit an account recovery request. Use this route if you remain unable to sign in or the account email was changed.
- After regaining access, reset your password and re-enable 2FA.
Follow Epic’s official compromised-account recovery instructions; recovery depends on Epic’s process and is not guaranteed.
How to report a security flaw to Epic
Researchers who believe they have found a vulnerability in an Epic website or product can email security@epicgames.com or submit it through Epic’s HackerOne bug bounty program. For ordinary account or password problems, Epic directs players to customer support instead.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems
