Hacked while i was playing

#0 - Sept. 25, 2010, 7:24 a.m.
Blizzard Post
Account Hack in progress . . .

i was just playing now, and i received an email stating that my account password had been changed. i quickly took action, changing the password back and retreiving my android phone to get an authenticator on it; not quickly enough, however. i received two emails in quick succession, one for a password change and another for an email change. i slapped the authenticator on it fast, so they don't have access to my account. . .

but neither do i. i don't have the email nor the password (which is probably in chinese or something) that was used, so i can't get into my account. i'm currently online, but as soon as i have to go to bed and it afk's out i'm going to be locked out of it pretty much permanently until something is done. what else can i do? i did the 'account recovery' thingamabob in the thread up there, but i'm not sure that the information will be sent to my correct email. i would hate for the hacker to get access to the account again because it got sent to <removed> or whatever it is that he changed my login to.

anything you can tell me?
#3 - Sept. 25, 2010, 3:47 p.m.
Blizzard Post
I am glad to hear you were online at the time of the compromise, Teeks. Adding the authenticator was quick thinking on your part.

I do show the email was changed and the password was reset by a malicious party. Resetting the password is a different process than simply changing the password. In order to reset the password you must know the first name, last name, Secret Question Answer, and the email address associated to the Battle.net account. You must also have access to this email address in order to retrieve the password. This other party has this information and therefore was able to make these changes.

In a case like this begin by thoroughly scanning your computer. I can understand in haste you may have acknowledged the computer was secure so you can get the compromise reported ASAP. But it is imperative this step be taken. If you need assistance on where to begin, start here:

Account Compromise: What to do:
http://us.blizzard.com/support/article/30796

After following the 6 steps, then contact Account Services to update the information on the account. Since it is likely the hacker has access to your email address it is recommended you create a brand new email address that is only for Battle.net purposes.

Account Services
Assists with: billing issues, password recovery, paid services, subscriptions, payment issues, account management, etc

Hours: 7 AM to 8 PM Pacific Time

How to contact:

Contact page: http://us.blizzard.com/support/article/contactbilling
International contact page: http://us.blizzard.com/support/article/international