Blue Tracker
World of Warcraft Blue Posts
Diablo II: Resurrected Blue Posts
Diablo III Blue Posts
Hearthstone Blue Posts
Overwatch Blue Posts
Heroes of the Storm Blue Posts
Diablo IV Blue Posts
BlizzCon Blue Posts
Warcraft Rumble Blue Posts

Account Hacked/Authenticator Attached

Forum Avatar
Wqegrerwqee
#0 - June 22, 2010, 10:53 a.m.
Blizzard Post
Posted in the technical forums, and didn't get a response. Basically my account was hacked sometime yesterday (the 21st), and when I tried to login last night, I was asked for an authentication code (my account had no authenticator). I also received an email saying my account was suspend for 72 hours. I'm not entirely sure if this email was legit (it came from "[email protected]"), but it very well might be. When I try to login to the account hacked on the FORUMS, I see all my characters grayed out, and i can't select any of them. As such, I'm posting from a DIFFERENT account.


I'm not really sure what to do in this situation, do I post my WoW account name? Only thing I could think of, was post armory links to just some of the characters affected, which you can clearly see are missing pretty much all of their gear.

http://www.wowarmory.com/character-sheet.xml?r=Gorgonnash&cn=Zer
http://www.wowarmory.com/character-sheet.xml?r=Gorgonnash&cn=Stevncolbert
http://www.wowarmory.com/character-sheet.xml?r=Gorgonnash&cn=Tehzerbank

Any help is much appreciated.
Forum Avatar
Orlyia
#1 - June 22, 2010, 10:59 a.m.
Blizzard Post
This is indeed on a 3 day suspension from activities the compromiser indulged in, Wqe.

The good news is, the authenticator is gone.

It is going to be vital to find the source of this security breach. If that's not found, the chance of them coming right back are VERY high.

I'm going to post fuller instructions below. The important bits are going to be security and recovery. You shouldn't need to contact billing UNLESS they come back and put another one of these on -or you can't regain access to the account.

-----------------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.