Hackers executed a massive credential stuffing campaign that compromised over half a million player accounts. The attackers changed account login configurations and leaked account names, linked email addresses, and security settings of global players online.