Account Locked - Suspicious Activity?

#0 - Aug. 28, 2010, 11:11 p.m.
Blizzard Post
I tried logging into my battle.net account earlier today (around 2pm) when I noticed my account was locked. I checked my email, and lo-and-behold..


Q u o t e:
Due to suspicious activity, the Battle.net account (Account here) has been locked. To restore access to this account, please follow these steps:

Step 1: Secure Your Computer

(Information here)


Step 2: Secure Your E-mail Account

(Information here)


Step 3: Choose a New Password

(Information here)

(Link was here)


If you still have questions or concerns after following the steps above, feel free to contact Customer Support at http://us.blizzard.com/support/article.xml?locale=en_US&articleId=20606.

Sincerely,
The Battle.net Account Team
Online Privacy Policy



Before you say "Scam Email!" Let me point some things out.

- The URL's in the links were to us.battle.net. Verified by hovering over the links.
- It was to my real us.battle.net account. I have an email address used for my battle.net account, and battle.net account ONLY!
- The Header of the email was as follows:
Q u o t e:
date Sat, Aug 28, 2010 at 8:28 AM
subject Battle.net Account Locked - Action Required
mailed-by blizzard.com
signed-by blizzard.com





So I'm wondering, what "Suspicious" activity caused my account to be flagged?




Edit: I had already went through the hoops to restore my account. So please, don't do yet another password reset.
#3 - Aug. 28, 2010, 11:21 p.m.
Blizzard Post
Q u o t e:

Edit: I had already went through the hoops to restore my account. So please, don't do yet another password reset.


Assuming that the account is actually being locked and it's just about possible phishing attempts, this isn't something that would be under our direct control, Chirstel. If suspicious activity is detected on the account then the account may be locked. I am sorry for what inconvenience that may cause you, Chirstel, though I hope you can understand that our goal is to prevent the account from being accessed maliciously.

If this continues to happen though we can try and figure out what may be triggering it.

Fake E-mails from "Blizzard Entertainment"
http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1
#24 - Aug. 29, 2010, 12:23 a.m.
Blizzard Post
Q u o t e:
Can we stop talking about authenticator security, and more about why my account was flagged for suspicious activity?


That I couldn't say, Chirstel, something was detected which triggered the security lock. Perhaps someone attempted to access the account, perhaps malicious software was detected, I don't really know.

If it hasn't happened again and you haven't really changed anything then odds are it was triggered from an outside source.
#30 - Aug. 29, 2010, 12:42 a.m.
Blizzard Post
Q u o t e:

- I wasn't hacked. I logged in where I last logged out.


Was anything I posted read? O.o

If someone attempted to log in from an outside source and we detected it that very well may have resulted in the temporary lock on the account. You wouldn't have been "hacked" and you would remain where you originally logged in because access was technically prevented. :)
#36 - Aug. 29, 2010, 12:57 a.m.
Blizzard Post
Q u o t e:
Well, if it was detected, wouldn't it also be logged as well? Anything recently.. 12-18 hours?

Very possible, but not something that I or our In-Game Support department currently has access to. I'm sorry, Christel, if we were able to give you more information regarding this matter we would.