#0 - July 25, 2010, 6:39 p.m.
Greetings
An investigation of your World of Warcraft account has found strong evidence that the account in question is being sold or traded. As you may not be aware of, this conflicts with Blizzard's EULA under section 4 Paragraph B which can be found here:
WoW -> Legal -> End User License Agreement
and Section 8 of the Terms of Use found here:
WoW -> Legal -> Terms of Use
The investigation will be continued by Blizzard administration to determine the action to be taken against your account. If your account is found violating the EULA and Terms of Use, your account can, and will be suspended/closed/or terminated.
In order to keep this from occurring, you should immediately verify that you are the original owner of the account.
To verify your identity please visit the following webpage:
[Removed]
Blizzard staff will verify your account information submitted in two days, please do not modify your account information during this time . It will not affect your game uptime.If you are unable to successfully verify your password .using the automated system, please contact Billing & Account Services at 1-800-59-BLIZZARD (1-800-592-5499) Mon-Fri, 8am-8pm Pacific Time or at billing@blizzard.com. Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, Blizzard representatives typically must lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.
Regards,
The World of Warcraft Support Team Blizzard Entertainment
Here is the originating IP:
X-Originating-IP: [211.232.43.194]
X-Originating-Email: [black_lady_91@hotmail.com]
Here are the potential locations of this IP:
0 0 Seoul, KG, KR
20 12 Kwangju, CN, KR
20 12 Songnam, KG, KR
21 13 Uijongbu, KG, KR
22 13 Buchon, KG, KR
22 13 Bucheon City, SO, KR
23 14 Kunp'o, KG, KR
39 24 Tongduch'on, KG, KR
Should it not have been sold directly by Blizzard, which i doubt it has been, then it is the site owner's responsibility to keep personal contact information safe, which in this case, has not been done.
(For those who want to know, I use the term site owner's because I registered through the website, it could mean that the site got hacked, which if it did, unless its really tough to find, it would be fixed by now)
Therefor I would suggest that you look into your site's security
(by this, i mean, look to see if there are not any security breaches allowing access to the database, again, I doubt this is the case)
as well as encrypting the emails in your databases in case that the email would be sold to 3rd parties by an employee of your company.
(If i would want more money, work for blizzard, and have access to this, i would do it, not even kidding here, so why would someone else in that position not do it should he be able to, a simple screenshot of a few lines on the email feild in the DB showing its encrypted would point the responsibility to another site (curse.com))
Being forced to register using my email so you may use it to sell to third party users who would clearly use the email with the intention to fraud a person, makes Blizzard just as liable as the frauder himself.
(If an employee does something, and the security concerning that something (emails for example), the company is liable, not meaning it is directly their fault / intention)
I therefor demand that my informations be kept for private uses only as I never agreed to Blizzard selling the email to third parties when I registered the account. (I kinda agreed to it by signing up, I know, the thing here is that it is also my log in name into a service for which I pay for, therefor, it cannot be given now without direct consent. ie: You can sell my email, but you cannot ask me to keep my account info secure if you sell my login name too, so the TOU is a contradiction in itself. This is only my opinion and I believe it is right)
Edit: For those only reading, skipping the rest, made it clearer to reflect the rest of this thread.
AND PS: To make everything sure, I will be changing my login to an email that looks like: sfoai2w92fn0f20@domain.com with a pretty similarily typed password. (thats because my current one hasnt been changed in over 12 months due to the fact I stopped a while back.)
