Blizzard account security

#0 - Sept. 18, 2009, 8:57 p.m.

http://forums.worldofwarcraft.com/thread.html?topicId=19820638292&postId=198187966028&sid=1#4

Original thread. Basically, what I had stated on the phone with the representatives that my account was not secure was true. I went through a week long process of securing my account after sending an email to a false email address "headers are blizzard.com but you have to pay attention to where theyre actually sent to" -- Anyways I go to log on tonight, and ALL of my informations been moved to a battle.net account, which apparently requires ZERO reply or response from the account email address. Awesome idea Blizzard, no wonder there are soo many notices about account security. Now I sit with my account online with some random person looting my account and nothing I can do, even though i was assured by your tech team that it didn't matter to change my personal security word. Thanks guys! Real bang-up job you do over there.

Orlyia

#13 - Sept. 18, 2009, 9:42 a.m.

Q u o t e:
I sent in a false account recovery form with all of my information -- email addresses, security word, etc, because the header said "blizzard.com" -- those yahoo.com accounts are tough to find who you're actually sending to. Anyways point being, I stated this on the phone, and they understood this had happened, and I wasn't allowed to change my security word. I was told it was secure after password and email account change, but because the battle.net merger doesnt require email confirmation, it clearly wasn't secure.

I recommend you give Billing another call in the morning, Bean.

I also highly recommend getting an authenticator for this account. Billing should be able to get you back into control and generally take a look at things.

It's no substitute for good security habits, but it will keep anyone else out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator for Battle.net accounts
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.

Orlyia

#15 - Sept. 18, 2009, 9:48 a.m.

Q u o t e:
Well yeah checking email headers is a given, I was just thrown off on the fact that I needed to "recover" my account. Supposedly something threw a flag up 4 years ago. Though from the account security department and phone department, no you can't change it, even though I said it would clearly be the best way to secure the account. I'll probably just get a refund on my purchases -- as allowed by the license when agreeing to it in the world of warcraft logon, and go about my business. This has left me with a sour taste and I really don't even want to play anymore. I suppose the hackers won then.

If security questions could be changed, they'd be worthless, as that is the first thing a compromiser would do.

There is indeed a refund clause, but I believe that is very soon after purchase. You may want to double-check that if the copy of the game in question has been owned for some time.