A class action lawsuit has been filed against Epic Games by Franklin D. Azar & Associates in U.S. District Court in North Carolina, according to an article from Polygon.

The lawsuit concerns a bug in Fortnite that was successfully exploited by hackers. The hackers managed to gain access to personal information, such as credit and debit card details, stored in millions of Epic Games accounts.

The hackers then proceeded to use this sensitive information to purchase in-game currency or paid versions of the game before selling the game codes online in exchange for real-world money. Some accounts were even resold for real-world money.

Epic acknowledged the bug in January 2019 and patched it soon after, but the lawsuit claims that Epic could have done and should be doing more to protect its customers:

[…] affected Fortnite users have suffered an ascertainable loss in that they have had fraudulent charges made to their credit or debit cards and must undertake additional security measures, some at their own expense, to minimize the risk of future data breaches including cancelling credit cards associated with their Epic Games/Fortnite accounts and changing passwords for those accounts. Furthermore, Fortnite users have no guarantee that the above security measures will in fact adequately protect their personal information. Fortnite users therefore have an ongoing interest in ensuring that their personal information is protected from past and future cybersecurity threats.

The firm also alleges that users affected by the security breach were not informed and their safety may still be at risk.

The lawsuit comes just a few weeks after the law offices of Chimicles, Schwartz Kriner & Donaldson-Smith officially filed a class action lawsuit concerning Joy-Con drift against Nintendo America.