Thread: Massive Blizzard Accounts Compromised

Title says it all. A few days ago, I got an email saying my account had been compromised. The first thing I did was check my account in a new tab to make sure it was legit. Sure enough, it was. My password was fine, however a Blizzard Authenticator was added to my account. I haven't seen what happened exactly anywhere on their forums but I can see this is a massive issue that has hit a number of people.

I have not even played my WoW account in I don't know how long, but this is bullshit. How can someone get so many people's account info so easily and screw them over? Especially when I have not played WoW in literally months (I had a free "welcome back" type of trial a few months ago).

I waited it out and it seems my characters have been "recovered"...but I really don't know what has happened since my account is not active. I was hoping they'd see that the Authenticator was added at the same time and remove it, but alas they have not. To get it removed, I need to call them apparently to have them fix the issue so I can simply log in to my account properly.

And of course since this is a huge fuck up, their support is being flooded with calls and the avg wait time right now is 45min-1hr. Good fucking job Blizzard. The worst part is, I doubt any of us will receive any sort of compensation for their fuck up.

I need to get this resolved in case anyone is wondering because it would be nice to get some games going on SC2 when it comes out. Since everything is now done through the bnet accounts, they are linked so this makes it so I cannot access anything Blizzard related. :5

After nearly an hour waiting on the phone, finally got hold of a rep and of course they try to blame it on me. "Did you make sure you computer was free from any maliware, keyloggers, and virus?" Duh, I'm not an idiot. "Have you clicked on any links that were fake asking you for any user information?" Or some shit like that. Like I don't know how to spot a fake or phishing email. It is obviously nothing the people have done since I've seen a shit load of people all bitch about the exact same thing on their forums, but Blizzard will just stick it to us and say it is our fault.

Oh and I forgot to mention, the rep on the phone was like "I'm going to go ahead and send you an email to make sure you don't have anything on you computer."

...Seriously? You think I don't know how to update my shit or that I'm stupid enough to give out my info or have any other way of my account being compromised? *sigh*

The fuck does an email do that can prove anything that your computer doesn't have any malware on it? Fucking stupid.

Think I will try getting in contact with an old friend of mine that works for Blizzard.

Originally Posted by DancingCorpse

The fuck does an email do that can prove anything that your computer doesn't have any malware on it? Fucking stupid.

Think I will try getting in contact with an old friend of mine that works for Blizzard.

It is pretty stupid actually.

Hello ****,

You are receiving this email as you had expressed that your password was changed without your knowledge and/or concern that your account might have been affected in a detrimental way. Below is information that should be useful to assure your computer's security and to assist with any related in-game issues on your account.

COMPUTER AND ACCOUNT SECURITY:
For your own protection, we encourage you to keep the following security tips in mind when using any computer on which you play World of Warcraft:

Before you log back into your account, you will want to review the following page, which has details regarding Trojans and viruses, as well as programs to remove them: (http://us.blizzard.com/support/article/30805).

Please also remember to use a brand new password and not one you previously used.

-Adding a Blizzard Authenticator to an account is the highest level of security we currently offer. For more information, please visit: http://us.blizzard.com/support/artic...g=BLIZZARDAUTH.

To learn how to merge an existing World of Warcraft account with a new Battle.net account, please visit: http://us.blizzard.com/support/artic...rticleId=26030.

- Please Note: The First Name, Last Name, Secret Question and Secret Answer on an account cannot be changed.
- Keep current with the latest operating system and other software updates.
- Make use of firewall protection if possible.
- Regularly scan for viruses, Trojan files, and key loggers.
- Be wary of e-mail scams and "spoof" emails—"spoof" e-mails are e-mails that may appear to have come from Blizzard (i.e. noreply@blizzard.com) asking you for sensitive account information.
- Be wary of malicious websites.
- Take caution when downloading new software such as third party add-ons—these programs may contain malicious software.
- Always remember that Blizzard would never, under any circumstances, ask you for your account password.
- If the security of your World of Warcraft or Battle.net account was compromised, we highly recommend that you take the appropriate actions to maintain the security of your email account. Please visit http://us.blizzard.com/support/artic...rticleId=28585 for more information about unauthorized email forwarding.

UNAUTHORIZED CHARACTER TRANSFERS, CHARACTER NAME CHANGES, CHARACTER RE-CUSTOMIZATIONS, RACE CHANGES OR FACTION CHANGES:
If your account was accessed and any form of Character Transfer was done without your approval, please visit (http://us.blizzard.com/support/article/21529) for more information on having this investigated.

If a Character Name Change was made without your approval, please visit: (http://us.blizzard.com/support/charn...webform-us.xml) to report the change.

If a Character Re-Customization was made without your approval, please visit: (http://us.blizzard.com/support/artic...tomizationform) to report the change.

If a Race Change was made without your approval, please visit: (http://us.blizzard.com/support/article/racechangeform) to report the change.

If a Faction Change was made without your approval, please visit: (http://us.blizzard.com/support/artic...tionchangeform) to report the change.

CHARACTER MISSING OR MISSING ITEMS:
If you login to the game and find your characters are missing items or have been deleted, please submit a ticket to the Game Masters in game using the following procedure:

1. Log into the game with the affected character, if possible. If for any reason you cannot log in with that character, try logging in with another character or creating a new character (preferably on the same realm).
2. Press the "Help request" button. It is the "?" icon in your toolbar.
3. Click "Talk to a GM"
4. Click "Open a Ticket"
5. Enter a description of the issue and give specific details (e.g. character name, realm, item name, etc.) as applicable.
6. Press the "Submit" button.

Once you have submitted the information, you will see a notification appear in the top right section of your screen that you have an open ticket. A GM will be in contact with you as soon as they are able, to help you resolve the issue. Wait times can vary depending upon the time of day and the amount of pages in the queue, but they will work to get to you as quickly as possible.

Our Game Master staff has constructed an excellent guide on computer security and how to prevent Trojans and viruses, along with account security tips. You can review this post (http://forums.worldofwarcraft.com/th...78038509&sid=1) for any further information you may need.

ACCOUNT SUSPENSIONS OR CLOSURE:
If your account has been suspended or closed due to the recent compromise, please contact our Account Administration department via the registered email address for further assistance. You can email them at wowaccountadmin@blizzard.com. Please allow them some time to reply, as all claims are reviewed and processed in the order they are received.

================================

That was the email I got. I laughed. I already have AVG Free, completely up to date and it found nothing. Ran Spybot. Found nothing.

Their best solution "Adding a Blizzard Authenticator to an account is the highest level of security we currently offer. For more information, please visit: http://us.blizzard.com/support/artic...BLIZZARDAUTH."

So because of mistake on Blizzards part, I have to pay extra for some stupid random Authenticator? Fuck that.

Just need to make sure none of my personal info was taken as a result.

Originally Posted by Fallen

same thing happen to me, but when i tried to call was on the line for over 3 hours!!!!!!!!!!! still don't know if my account was compremised or not. and i haven't played in YEARS!!!!!!!

How are these fuck-tards getting a hold of accounts people haven't logged into for years?

i got this same email a few times in the last month. Since I gave my account away to a old guildie of mine back in july and he had changed all the info to his email, I was surprised i was getting these emails. First thing I did was call my friend up and ask him if he had changed anymore info on the account. He said he didnt. Last week I got another email so i decided to call blizzard up. Since I got the email before 8 am I called right when there lines opened so didnt have to wait long.

First off the lady i talked to said she wouldnt report me for giving my account away. And secondly she told me it sounded like it was a hack email and she would log the information. So unless my friend has any issue with my account nothing was actually done to the account. Since i been recieveing these emails the last month he has been on the account and nothing was changed. He also has his own authenicators for both accounts. I would just ignore those emails unless something has been compromise.. go through the actualy wow site and not click on those emails. As for what i understand it is the actual emails that are the hacks.

This is the actual email I have recieved.....

World Of Warcraft-Account Instructions?
From: wowaccountadmin@blizzard.com (wowaccountadmin@blizzard.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: Mon 1/25/10 10:04 AM
To: AFLana@hotmail.com

Greetings!
This is an automated notification regarding the recent change(s)
made to your World of Warcraft account. Your password has recently been modified through the Password Recovery website.
*** If you made this password change, please disregard this notification. However, if you did NOT make changes to your password
we recommend you Login verify your password:

http://www.worldofwarcraft.com
If you are unable to successfully verify your password .
using the automated system, please contact Billing & Account Services at 1-800-59-BLIZZARD (1-800-592-5499) Mon-Fri, 8am-8pm Pacific Time or at billing@blizzard.com. Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, Blizzard representatives typically must lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.
Regards,
The World of Warcraft Support Team Blizzard Entertainment

Originally Posted by DancingCorpse

How are these fuck-tards getting a hold of accounts people haven't logged into for years?

I get something along the following lines at least once a week in an email account that is not associated in anyway with my old wow account:

Blizzard Notification About World of Warcraft Account?
From: Blizzard Entertainment (wowaccountadmin@blizzard.com)
Sent: Sat 1/23/10 4:33 AM
To: mury
Greetings!
It was reported that you are trying to sell your personal World of Warcraft account(s).
As you may not be aware of, this conflicts with the EULA and Terms of Agreement.
If this proves to be true, your account can and will be disabled.
We will gather more information through further investigation.
If you wish to not get your account suspended you should immediately verify your account ownership.
You can confirm that you are the original owner of the account by providing the following information:
* First and Surname
* Date of birth
* Address
* Zip code
* Phone number
* Country
* Account e-mail
* Account name
* Account password
* Secret Question and Answer Or WoW CD-Key
Show * Please enter the correct information

If you ignore this mail your account can be closed permanently.
Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Blizzard Entertainment

Ive occasionally filled it out with FUCK OFF, but that has not deterred them on bit.