Battle.net account Merge = hacked account

#0 - June 30, 2009, 7:32 a.m.
Blizzard Post
I don't know how it happened maybe a key logger or something but my brothers account all of a sudden was merged with a battle.net acct and HE DIDN'T DO IT!!! Now blizzard doesn't want to take responsibility for it they say get a hold of battle.net. Battle.net wants you to create a battle.net account to merge your wow account to it. Well the fact is some1 else merged it to their account so I HAVE NO WAY TO RETRIEVE HIS ACCOUNT. His character has been in storm peaks 20 hours a day for the last 4 days and I am getting no help from anyone. Nobody wants to take responsibility.

The fact that someone can create a battle.net account and put a wow account on it without having to verify personal information is ABSURD!! This needs fixed ASAP
#3 - June 30, 2009, 7:36 a.m.
Blizzard Post
Q u o t e:
I don't know how it happened maybe a key logger or something but my brothers account all of a sudden was merged with a battle.net acct and HE DIDN'T DO IT!!! Now blizzard doesn't want to take responsibility for it they say get a hold of battle.net. Battle.net wants you to create a battle.net account to merge your wow account to it. Well the fact is some1 else merged it to their account so I HAVE NO WAY TO RETRIEVE HIS ACCOUNT. His character has been in storm peaks 20 hours a day for the last 4 days and I am getting no help from anyone. Nobody wants to take responsibility.

The fact that someone can create a battle.net account and put a wow account on it without having to verify personal information is ABSURD!! This needs fixed ASAP


To do this they DID have information of that nature, specifically his password and ID. He was already compromised, even if they'd never touched his account.

The first step in unsnarling this type of situation is a phone call to Billing.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available Mon-Fri, 8am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


After that, this is pretty much like any other compromise situation.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

I do wish you all the best.
#6 - June 30, 2009, 7:45 a.m.
Blizzard Post
Q u o t e:


even so, I just merged my battle.net account to a wow account and it required nothing but an account name and password.

no security questions

no E-Mail verification


All I got was a notice in my E-mail telling my account was now a battle.net account

My brother got the same E-Mail 4 days ago but the battle.net email address/account it was merged to was not his E-Mail.... They made sure to notify him though ROFL~!


NO ONE but an account holder should have a password and ID to make this possible, Ulta.

If ANYONE else knows that information - security has already been compromised, whether or not anyone actually touches or molests an account.

Like I said, Billing can help unsnarl that portion and things can progress from there.
#11 - July 22, 2009, 11:08 a.m.
Blizzard Post
Q u o t e:


Even so, the point is that MERGING ACCOUNT SYSTEM IS BROKEN.

If someone else merges my account I lost it forever because I no longer have access to it (it now requieres the merged account login and pass)

Even if someone else JUST have my id/pass he still can't change my pass or mail because of the verification. That's exactly why Merging is broken: no verification.

This happened to a friend just a few mins ago, and I find it INCREDIBLE that you haven't fixed or paused the marging system.

SOME GREAT CUSTOMER CARE THERE.


We research and undo these as a matter of course for true account holders, Durriel. At most, it's an extra step in a standard compromise investigation. I also am a bit puzzled why you'd think this is irreversible.