Reporting a Security Vulnerability
Protecting the security of our players and games is our top priority, and we value the input and findings of independent security researchers to help us achieve our goal. If you believe you have found a potential security vulnerability in our games, products, or services, please report it to us via the form below.
Disclaimer
The below form is for reporting security vulnerabilities only. We may not respond to every report. For other inquiries, please visithelp.ea.com or use the following links so that you can contact the appropriate team for assistance.
1. If you believe your account has been compromised, please visithere.
2. If you have trouble logging into your account, please visithere.
3. To report cheaters or disruptive behavior or content, please visithere.
What is a Security Vulnerability?
A security vulnerability is a flaw found in a system that can be leveraged by a malicious actor to cause damage. This damage can result in loss of confidentiality, integrity or availability. Examples of such security vulnerabilities include but are not limited to cross-site scripting, SQL injection, publicly exposed credentials, subdomain takeover, or system misconfigurations with demonstrated security impact.
Responsible Disclosure and Guidelines
EA Security is committed to the practice ofCoordinated Vulnerability Disclosure. If you would like to disclose your findings publicly, we ask you to coordinate with us in advance. It is critical for us to keep our players and systems safe by remediating the potential issues first before they are made public.
Security Vulnerability Submission Form (EN)
We adhere to the principles of Coordinated Vulnerability Disclosure and would appreciate it if you keep information regarding this issue confidential until we’ve had adequate time to investigate and address it.
By providing your report, you grant EA all licenses needed to enable EA’s use of the report for any purpose without notice, attribution or compensation to you. You understand EA may have previously addressed or is currently working on the same or similar issues as those raised in the report. Your report is considered UGC under EA’s User Agreement which applies along with EA’s Privacy and Cookie Policy.