A while back, maybe a year and a half ago I put a Authenticator on my account. It broke and I removed it. Well I was hacked yesterday and had a new one to put on it instantly after. However the hacker still had the ability to reset my Password and I got a new e-mail saying it was reset again. While they can't access my account anymore in game they can still reset my password apparently. Why doesn't the PW reset require the authenticator as well? I think everything involved in changing your password or anything of the sort should require the code. I know this probably belongs in Suggestions forum but maybe someone in Customer Service can answer this for me.
If you have already merged your account into a Battle.Net account, Gluttony, you could simply change your e-mail address. This would, in essence, change your account name causing the Password Reset to not go though – which should save you from the trouble you are currently experiencing.
