It's ridiculous EA didn't pay any bounty for this
EA - "So here's $0."
If anyone is at EA, this man just saved the integrity of your entire empire, you might want to give him at least a token amount.
I reached out to employees via unofficial channels. I'm sure if I had spoken to some exec I'd be in jail right now.
The company is liable for $10 per hacked user minus 100X the bounty spend for that year.