BRAVE FC Letter to FFXIV (Security system glitch)

[iMustafa18]

Dear Square Enix (FFXIV Team Developers)

Greetings from [Edited by Moderator], Better known as my online ID in Final Fantasy XIV “Lionel Lightshield, Founder of The Zodiac Brave Free Company “BRAVE”. I would like to first command and appreciate the work you all put into making this game the beautiful game it is today, I have been playing ever since A Realm Reborn release acrossing through Heavnsward and Storm Blood and absolutely looking forward for the release of Shadowbringers. Great content allowed me to a nice opportunity into making a big and nice community within the game to enjoy and share the experience at most level.

In regards to my letter, however, I am approaching with all respect to discuss an issue that occurred in game on June 4th, 2019. We discovered that a trusted member of our FC's account unfortunately got hacked, resulting an incident where a total of 190,000,000 Gil, which was saved over a very long time by the donations of multiple FC Members, was stolen from the Free Company Chest. The victim's account has since been re-secured by a password change and the addition of a security token, which is something we are now requiring for all high-ranking members of the free company.

The method by which this incident occurred is what is making us concerned and is why we are approaching for the developers for cooperation in solving this issue. Our FC contains 10 ranks, with the top 4 ranks designated as management roles, giving these ranks access to certain settings (mostly the ones related to member and free company management) that the rest of the members cannot use. We have Gil withdrawal access limited to only three people in the two highest ranks, the Free Company Master and the two other leaders. However, the member who's account was hacked had permissions to promote/demote members, which we discovered (after the fact) meant that they could promote themselves or other players to any rank in the free company except for FC Master, meaning they were effectively able to give or gain access to any and all permissions that were not exclusive to the FC Master. Because of this, the hacked account was able to invite a new member to the FC, promote the member to the second-highest rank (which was above their own rank), then the new member was able to withdraw the Gil from our chest, after which they were discharged by the hacked account.

We are unsure if the game's official team is aware of such a scenario, but we would still like to point it out, as well as try to find a solution since this incident created chaos within a very friendly FC that has been around for over four years. Our security within the FC was taken very carefully, according to the maximum possibility that the game allows us to. This has become an emergency situation with unfortunately bad timing, especially considering the short amount of time left before the release of the new expansion, Shadowbringers. We tried to reach an in game GM via reports as soon as we discovered the issue and they escalated the issue to a GM supervisor, but we have yet to be contacted or told of any developments by them ever since. Please work with us to come up with the best possible solution to minimize the losses, and hopefully fix some of the Free Company settings to avoid such problems in the future, for both our Free Company and the free companies of players around the world.


Sincerely,
In game FC leaders:
Lionel Lightshield
Devil Johan
Stella Iris