Authenticator attached to my account

#0 - May 26, 2010, 4:38 p.m.
Blizzard Post
An Authenticator has been placed on my account. I did not purchase an Authenticator. I contacted Blizzard about this. 4 days later they enabled me to change my password. That's great thank you Blizz. Now i have a new password AND an Authenticator that I still can't get past because I don't own the authenticator to access its code. Meanwhile after checking Armory I find all my sellable items are gone on all my characters AND I've been banned from the game for cheats. Not to mention the email from Blizzard stating that it's my fault and I'm responsible for the actions of the hacker on MY account that Blizzard/battlenet can't seem to protect though I pay them for the service. Nope no one else plays on my account, I dont share my info blah blah blah. MY account has not only been hacked, it's been stolen through the ATHENTICATOR and apparently it's my fault, LOL. Amazing. Beware peoples.

TREFANG
80 stolen druid on Moonrunner
#9 - May 26, 2010, 6:35 p.m.
Blizzard Post
Q u o t e:
MY account has not only been hacked, it's been stolen through the ATHENTICATOR


The Battle.net Authenticator cannot be used to compromise an account, Gronnar. Do malicious parties frequently associate an unauthorized Authenticator with an account after it's been compromised? Unfortunately, yes. But the device itself isn't responsible for the actual theft.

Please note that in order for an unauthorized Authenticator to be associated with an account, the account must already be compromised. This means that the account's name and password were gleaned previously and the compromise would have occurred, regardless. =/

Q u o t e:
Meanwhile after checking Armory I find all my sellable items are gone on all my characters AND I've been banned from the game for cheats. Not to mention the email from Blizzard stating that it's my fault and I'm responsible for the actions of the hacker on MY account that Blizzard/battlenet can't seem to protect though I pay them for the service.


We didn't say that you are at fault. We did say, however, that you are responsible for actions taken by characters on your account. Huge difference! :)

In the event that we find a character behaving maliciously (e.g. botting, selling gold, etc), we will frequently disable access to the associated account. Why? Because, well, we don't want that character to continue exploiting. It's bad for the game, it's bad for other players.

This doesn't mean your account is gone forever, though. If you weren't in control of your account when the exploitation occurred, and we can verify that, we will be happy to restore access to you, the proper owner. We just need to be notified through the proper channels—this is where your responsibility kicks in. (More on this below.)

Your responsibility also extends to maintaining the security of your account. While we've established numerous checks and balances to ensure that your account information is safe on our end, we cannot prevent you from visiting malicious websites, or force you to keep your scanning software up to date, or stop you from giving out your login information to other parties. These are things that only you can do. And, in the end, accepting that compromises occur client-side is the first and most important step to protecting your account.


As always, though, we'll be happy to help you reclaim your account (if necessary) and recoup any losses your characters may have suffered as a result. You'll want to get started on the account recovery process as soon as possible, and here's a guide that will walk you through step-by-step:



Securing your computer, securing your account information, reporting any losses, and prepping for the restoration process—all of this is included. I sincerely encourage you to give the guide a read and follow the instructions provided within.



Also, quick note! We can assist with the removal of the unauthorized Authenticator through multiple points of contact:




Please note that each of these contacts may not yield an immediate response. We understand that being locked out of your account is frustrating, though, so our representatives will do all that they can to assist you as quickly as possible.