Square Enix Warns of Unauthorized FFXIV and Dragon Quest X Logins
Square Enix frames this as credential reuse from other companies' leaks rather than a breach of its own services, and it has named a second MMO, Dragon Quest X, under the same account system.
Key Facts
- Square Enix published its notice on the Final Fantasy XIV Players' Site and The Lodestone on October 19, 2026.
- Square Enix says it confirmed unauthorized logins to Square Enix Accounts using email addresses, account IDs and passwords believed to have leaked from other companies' services.
- Accounts believed to have been compromised have already had login restrictions applied, with lifting instructions sent to the registered email address.
- Square Enix recommends one-time passwords alongside the ID and password, and names Google Authenticator and Microsoft Authenticator as free authenticator app options.
- Square Enix says a password reset for all Square Enix Accounts is possible if unauthorized access continues to increase.
Reporting from 4 sources: GAME Watch (Impress), Denfaminicogamer, GameBusiness.jp, Game Spark.
Square Enix posted a notice titled "[Important] Notice Regarding Unauthorized Access and Account Management" on the Final Fantasy XIV Players' Site and The Lodestone on October 19, and later posted a matching notice on the Dragon Quest X official site. The company says it has confirmed logins to Square Enix Accounts using email addresses, account IDs and passwords believed to have leaked from other companies' online services, and that the reused combinations are being tried as-is. Accounts that reuse the same credentials as another service are at higher risk, and Square Enix adds that easily guessed passwords such as repeated characters, repeated numbers or a date of birth carry the same danger. The company asks affected users to change passwords immediately, and it recommends one-time passwords in addition to an ID and password. Accounts believed to have been compromised have already been restricted from logging in, with instructions on lifting the restriction sent to the registered email address, and Square Enix says a reset of all Square Enix Account passwords is possible if the unauthorized access keeps increasing.
The notice does not describe a leak from Square Enix's own services. It describes login attempts that pair email addresses, account IDs and passwords leaked elsewhere and reused unchanged against Square Enix Accounts, the shared login that covers both Final Fantasy XIV and Dragon Quest X.
Accounts already judged to be compromised have login restrictions applied, and the lift process runs through the email address registered to the account: users reset the password first, then log in. Square Enix recommends adding a one-time password on top of the ID and password, and points to free authenticator apps, naming Google Authenticator and Microsoft Authenticator as options, plus a security token. The notice also states that a password reset across all Square Enix Accounts is on the table if unauthorized access keeps rising. Dragon Quest X's notice repeats the same terms rather than describing a separate incident, so the warning covers the account system both games sit under.
Synthesized by Yomimono from the 4 cited sources below, including Japanese-language reporting where cited, then editorially reviewed before publishing.
Sources
- GAME Watch (Impress) 「FFXIV」が不正アクセスとアカウント管理に関する注意喚起を発表
- Denfaminicogamer 『FF14』公式がスクウェア・エニックス アカウントに不正ログイン発生と注意喚起。他社サービスで流出したとみられるIDとパスワードの“使い回し”が狙われる
- GameBusiness.jp スクウェア・エニックス、『ドラクエX』でも「不正アクセスとアカウント管理に関するご注意」掲載。『FF14』に注意喚起
- Game Spark スクウェア・エニックス、『ドラクエX』でも「不正アクセスとアカウント管理に関するご注意」掲載。『FF14』に注意喚起