Password keeps getting reset, not by me

#0 - Jan. 21, 2010, 1:58 p.m.
Blizzard Post
My account was compromised and is currently being investigated. I reacquired my account Monday morning and the password was reset by Blizzard. I noticed yesterday morning I had an e-mail that my e-mail had been reset via the account managment center. I thought this was strange as I didn't do it, but figured it had something to do with the investigation, so I changed it. Well I received another e-mail last night, password was reset via account management site. Again, I didn't do it. I've changed it again just now.

This is strange and I'm wondering if Blizzard is reseting it? I don't understand how anyone else could as I have an authenticator attached to the account so they can't log into "My Account". It's not a password retrieval (forgot password) either because I'm not getting the e-mail about a requested change to password where you need to click link.

Is Blizzard reseting this password?
#1 - Jan. 21, 2010, 2:21 p.m.
Blizzard Post
As you noted within your post, we did reset your password initially; however, there have since been 2 password reset requests since that time. It seems that these password reset requests were requested from our Battle.net Account Management page. In order to request a password reset, one must know the registered e-mail address, name of the account holder, and the answer to the secret question. Accordingly, I strongly encourage you to scan your computer for malicious software, create a new registered e-mail address, and contact our Billing Department if you would like to discuss the possibility of further changing your account information to ensure this continue to occur.

Billing can be reached using one of the following numbers:

Billing and Account Services
    Live Representatives are available every day from 8:00 AM to 8:00 PM PST
    For phone assistance please call: 1 (800) 592-5499 || 1 (800) 59-BLIZZARD
    • Players in Australia should call 1-800-041-378
    • Players in Singapore should call 800-2549-9273
    • Players in Chile should call 1230-020-5554
    • Players in Mexico should call 001-888-578-7628
    • Players in Argentina should call 0800-333-0778
    • All other international players should call: (949) 955-0283

Should you have any further questions, please let us know.
#3 - Jan. 21, 2010, 2:54 p.m.
Blizzard Post
I see no signs of your password being changed other than the reset we performed after your report of compromise and the two password reset requests, Christyee. You may want to contact our Billing Department to inquire further, but it seems these are the only password changes that have occurred since you reported your account as compromised.
#5 - Jan. 21, 2010, 2:59 p.m.
Blizzard Post
Q u o t e:
Perhaps the notifications she is receiving are phishing attempts?


It's a definite possibility. Are you attempting to log into the game and receiving the message that your login information is incorrect, Christyee? Or are you simply receiving e-mails stating that your login information has been changed?
#8 - Jan. 21, 2010, 3:04 p.m.
Blizzard Post
We have definitely seen phishing e-mails of this variety, Christyee.

Should you receive such an e-mail moving forward, I encourage you try logging into your account normally. If your password has not been changed, you know beyond a shadow of a doubt that the e-mail is incorrect and likely a phishing e-mail since it says "your password has recently been modified."

I advise you to send this e-mail to [email protected] and take a moment to review the following thread:

Fake E-mails from "Blizzard Entertainment"
http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1