Unsolicited Password Reset Request

#0 - Jan. 14, 2009, 5:28 p.m.
Blizzard Post
I received an email this morning saying a password reset was requested on my account. I was directed to account services, where I was able to specify a new password. Unless I was sleepwalking last night, I did not personally request the reset. I changed the password, as well as my account's email address, on a different computer of which I am 100% sure of the security (normal computer I take the usual precautions, virus, firewall, firefox, etc., but since it's windows I'm still only 99% sure), but I am not sure if I should be further concerned about my account's security or why the password was reset. Any insight would be appreciated.
#2 - Jan. 14, 2009, 5:40 p.m.
Blizzard Post
I would encourage you to do the following, Kahll:

    1) Initiate at least one antivirus and two anti-malware scans on your primary home or work system.
    2) After these scans have completed, or perhaps while they are running, set up a new email address from a clean a computer—one that you are absolutely certain is devoid of potential keyloggers. When selecting the username and password for this new email address, ensure that these variables do not overlap with that of your WoW account or any other login type (guild websites, Facebook, MySpace, etc).
    3) Register this new address to your account and do not use it for anything else: no additional registrations, no guild websites, no newsletter sign-ups, et al. Keep this email address as isolated as possible.
    4) Once your new email address is registered, reset or your retrieve your password via Account Management.


The password request you received was not initiated by one of our departments, so it would be extremely beneficial for you to take steps to bolster the security of your account at this time.

Further information may be found here:


Please let me know if you've any further questions, Kahll. I'll be happy to help.