Account hacked, Authenticator added to it

#0 - June 30, 2010, 10:12 p.m.
Blizzard Post
I woke up this morning and go to log in to my account and someone applied an authenticator, transfered characters, vendored my epics, and now my guild is really hurting on healers. Please lock my account for now and help me Blizzard!
#4 - July 1, 2010, 12:38 a.m.
Blizzard Post
Unfortunately we are unable to lock an account through a forum post, Athiera, though you may be able to reset your password through the following link to prevent further access to the account.

https://us.battle.net/account/support/password-reset.html

You'll also need to contact our Billing and Account Services to have the Authenticator removed. I'd recommend calling but you should also be able to send an e-mail as an alternate way to reach them.

Email Support
o Website E-mail Form
http://www.blizzard.com/support/wowbilling/?id=eSupport000
o Billing@Blizzard.com

Phone Support
You can call 1 (800) 592 5499 (1-800-59-BLIZZARD) 7AM-8PM (PST) for live representation.
Australian users should please call 1-800-041-378 if the standard 800 line does not work.

More information on account compromises as well as computer/account security can be found in the following thread.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244&sid=1
Q u o t e:

but when they restore your items, they'll only restore the crap that you don't even care about, like your bank and bag items, your main gear that the hacker deleted they will forget about, and you'll continue being screwed on being able to play..... at least that's how mine went....


What items are you still missing, Darkshadow? I show that we restored a number of items that would usually be considered a person's active gear. Not something you wouldn't care about.

78 Emblems of Frost.. Deathspeaker Zealot's Helm, Blood-Soaked Saronite Stompers, Blade-Scored Carapace, Collar of Haughty Disdain, etc.... they seems to be in your mailbox right now and you have yet to retrieve them so I'm not certain what you mean that we have provided you with items that you don't care about.

Also it would be nice if you kept in mind, Darkshadow, that we did not compromise your account, nor by inaction allow it to be compromised yet we are willing to do spend a great deal of effort doing what we can to repair the damage that was caused.

If you are still missing items you are welcome to submit another petition requesting that we take another look or e-mail wowgm@blizzard.com.
Q u o t e:

and don't forget that your account will be hacked in two days after getting it back... before you are able to order the authenticator which has been added without your knowledge...again...


That would be unfortunate and is rather common but such activities would seem to indicate that sufficient efforts to find and eliminate the source of the compromise were not made, Psychopatch. Remember the Authenticator is excellent for an added layer of protection but it is best to figure out how you were compromised and remove it.

Battle.net Account Security Awareness
http://us.battle.net/security/

Account and Computer Security
http://us.blizzard.com/support/article/30794

How to Identify Fake or Phishing Emails
http://us.blizzard.com/support/article/25133

Battle.net Authenticator
http://us.blizzard.com/support/article/24986