Cluster Compromises

#0 - July 21, 2010, 5:22 a.m.
Blizzard Post
I've been playing this game since release and I have never seen this many accounts hacked at once. 7 people in my own guild and 2 real life friends.

The worst story is my real life friend who started playing just a month ago. He made it up to level 14 and had to let his account lapse for a month due to financial difficulties. He recently got an email saying his account had been banned for exploiting the economy. His computer is behind a hardware firewall running Avast anti-virus and he runs malwarebytes daily. It would be next to impossible to break into his machine.

It is time for a Blue to address this on going problem. Obviously blizzard has been compromised on a large scale and they need to own up to it. In fact they could be in legal trouble if they don't notify every single person who has had their personal information compromised.
#47 - July 21, 2010, 5:52 a.m.
Blizzard Post
No, no....no, no.

Not happened - and it CAN'T happen from an employee. We don't have access to passwords - PERIOD.

It is highly likely however, in a cluster situation, that there is a far simpler explanation - such as a guild website that they've used the same information on. Hopefully, it's not a case of account sharing where people are allowing someone with a compromised system to access their accounts.

Just about anything anyone would need to know regarding a compromise can be found below.

----------------------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.