"an exploit was discovered by duplicating a session ID
basically, if you join a public game with people, they can view your session ID and spoof it to login as you without need for a password or email or anyting
if you play with people, try not to play in public games bro, only with people you know"

A FB friend that enjoys forums where people like to hack video games, decided to tell me. If this is possible try to figure out how to put an end to it.

We've been taking the situation extremely seriously from the start, and have done everything possible to verify how and in what circumstances these compromises are occurring. Despite the claims and theories being made, we have yet to find any situations in which a person's account was not compromised through traditional means of someone else logging into their account through the use of their password. While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.

If your account has been hacked, please view the previous post for information on contacting our support department.