Account Name

#0 - March 6, 2008, 7:44 p.m.
Blizzard Post
I took an extended break from WoW well over a year ago. About 4 months after I stopped playing someone called to let me know my toon was online. I simply changed the password and deleted the billing info the haxzor used. I notified billing for CYA reasons but didn’t bother with any restores. I started playing again a few months ago and got hacked again yesterday. After hours of meticulously checking my system there is absolutely no trace of any keylogger on my system. Before everyone starts in ... I know the canned response on this so please spare me. I’ve worked on Windows systems and their security for 10 years, including DOD systems, so I have a little bit of an idea about how this works. Simple fact is I was dumb when I created the account name, I made it way too simple. I believe at this point they are brute forcing my account. I have changed my password now to maximize the complexity but I’m still worried.

Is there any way to have my account name changed?
#8 - March 6, 2008, 8:15 p.m.
Blizzard Post
Q u o t e:
Is there any way to have my account name changed?


No, Illuminar; there is not. =/

For credence:
http://us.blizzard.com/support/article.xml?articleId=20494

    Please note that the following items cannot be changed on your account:

      - Account Name
      - First and Last Name
      - Secret Question and Answer


There are specific situations wherein one's name is permitted modification; however, such a change is completely dependent on the provision of legal documentation or notarization. The other two points—both account name and Secret Question/Answer—will remain unaltered for the duration of an account's use.

As you've already examined your system and ensured its security, there are a few other steps you may wish to take since your desired route is not presently available. While it's imperative that all supplied data be valid, it's possible for you to update your registered email, address, and phone number to more obscure references—using a work location or PO Box. Should you still feel insecure, though, there is the option to create another account and move desired characters over; a drastic measure, but one which may bring peace of mind.
#10 - March 6, 2008, 8:21 p.m.
Blizzard Post
You're not posting from the affected account, are you? Could you perhaps provide me a name and realm of a character on the account in question?

In the meanwhile, email [email protected] to dispute the action should you believe the situation unwarranted.
#12 - March 6, 2008, 8:24 p.m.
Blizzard Post
Don't log out of your forum session just yet. I've questions still to ask of you. :)
#18 - March 6, 2008, 8:44 p.m.
Blizzard Post
Here's what you'll want to do:

1) Contact Account Administration

    Email: [email protected]
    Web form: http://us.blizzard.com/support/webform-us.xml?gameId=11

    Provide as much detail as possible, listing at what time you last accessed your account prior to the believed compromised and at what time you were able to regain ownership—estimations or approximations will suffice for this particular email, as it's only to give our representatives a frame in which to search. Get this letter sent off as soon as you can, taking special care to use the email address associated with the account as the source.


2) Wait patiently

    Our AA representatives will review the activity for which you were penalized and, bearing that the behavior witnessed is found to have occurred during a time at which you did not possess access of your account, will be happy to make amends. This make time anywhere from 12 to 24 hours, Illuminar, so sit tight.


3) Report the compromise

    Email: [email protected]
    Or simply submit an in-game petition

    The latter, of course, rests upon the removal of the suspension you're presently serving—just something to note. My advice would be to email our address and then, pending restored access, submit an in-game petition at a later time. Be sure to include characters, realms, amount of gold missing, and whether or not inventories have been, as well.


Good luck!
#22 - March 6, 2008, 8:54 p.m.
Blizzard Post
Q u o t e:
The email responce said not to submit more reqests as it can cause delays.


From whom? Our Account Administration address?


Edit: Letting anthropomorphism stand. The AA department is now a human entity.
#25 - March 6, 2008, 9:01 p.m.
Blizzard Post
Aye. That's asking you to please refrain from contacting Account Administration further; inquiring from a different angle with our Game Master department is something wholly different. :)

wowaccountadmin@blizzard = Account Administration
[email protected] = Game Master

This is the nature of the following line:

    In the meantime, we offer other forms of support that are immediately available to you while we process your email.


You'll be absolutely fine reporting the specifics of your compromise—rather than disputing the suspension—to [email protected]. Sending word, though, is your choice; just know that IS an option.
#27 - March 6, 2008, 9:11 p.m.
Blizzard Post
We're not "punishing" the victim, Illuminar. Such suspensions which follow active compromises are implemented in hope to prevent further exploitation from occurring—it's a catch, a means of cessation.

Here's a more eloquent description for you to read while I verify that your email has been received:
http://forums.worldofwarcraft.com/thread.html?topicId=4071469304&postId=39996986961&sid=1#3
Q u o t e:

We can't claim to know anyone's modus operandi, Zooey. People are unpredictable and often act against the impression that they've given their acquaintances. Just last week, there was a thread here about how a trusted guild officer emptied the guild bank and transferred realms with the items in tow with no notice.

Just because someone's behavior isn't in keeping with their normal behavior doesn't mean that we can divert immediate resources to an investigation, and that's the truth of it. There are other people waiting for investigation who weren't fortunate enough to have friends notice they were acting funny when they were logged in. We simply can't place priority on tickets where someone is "acting weird". Emergency investigations into things like that when we've already hundreds to thousands of people waiting in line aren't going to be offered, especially when there's no indication from the account owner that these actions are being taken against their will.

Until an account is physically reported as compromised with word from the owner, we must assume that the actions being taken on the account are being taken with the owner's full wherewithal--as, after all, account security is the responsibility of the account owner. That's why we impose suspensions for economy exploitation when we see it happening. Our Hacks and Account Administration teams actively track strange behavior and thus have a leg up on offering suspensions as opposed to our investigators who must work in a different manner.

You may feel you've been treated unfairly, and I do apologize if that's the case. There's no denying that a compromise is a rough time, and I'm not begrudging you your feelings. The fact is, though, that you could just as easily have sold your account, had it power-leveled, or any other kind of illicit activity without telling your friends as much, and they could have drawn the conclusion that you were being hacked. We must first take steps to lock down the account in question, and then once the locks are in place, we can safely dissect the situation without further damage being done.

Your suspension and subsequent penalties will undoubtedly be removed if you're innocent, and I've no doubt that you are. I'm not here to accuse you of wrongdoing; simply to tell you that there are plenty of people out there participating in just that, and that's why sometimes unfortunate steps must be taken.

I anticipate that the investigation and restoration process will go smoothly for you, and I wish you the best in this time that's likely testing your patience.
#30 - March 6, 2008, 9:29 p.m.
Blizzard Post
The number you're presently attempting to dial syncs up with our Billing department, Illuminar; I'm afraid our representatives therein will not be able to assist you more than I. Your true path of absolution—so to speak, I suppose—lay with Account Administration; they're presently facing a turn-around nearing 36 hours, so I hope (dearly) that you'll receive a response very shortly. I'm unable to make guarantees, however, or expedite specific cases; I will stick with you through this, though, for as long as the process requires.

A quick note, though—I'm showing that your email yesterday was, indeed, addressed to AA; this occurred while you still possessed access to your account. For future reference (though let's hope it'll never have to be put to use), should you be able to log into the game and discover evidence of tampering, notify the Game Master department immediately—while AA is duly in charge of verifying or resolving account actions, the GM department possesses purview over compromises and following restorations.
#37 - March 6, 2008, 11:03 p.m.
Blizzard Post
I need to leave for the day, Illuminar, but I'm going to ensure that my colleagues keep an eye out on you. :)
#41 - March 7, 2008, 2:31 p.m.
Blizzard Post
I'm having this looked into right now. :)
#42 - March 7, 2008, 3:53 p.m.
Blizzard Post
Illuminar should now be able to log in appropriately, without further interruption or hindrance. Please convey my most sincere apologies to him. :)
#50 - March 7, 2008, 8:04 p.m.
Blizzard Post
My pleasure, Lum. Please do not hesitate to let me know if you have any further concerns. I'll be happy to jump in where and when possible.