Guild Wars 2

Today my account has been hacked, everithing is gone, i already sent a ticket to arenanet with all details, but no repsonse yet, i cant play anymore do to job duty, i have no more time to farm again what i gained during last year, ascendent weapon and armor destroyed.
I cant beleave how is easy and so feaseble to steal an account and no additional information or support from Anet so far, good job
tanks

1) It’s pointless to post here if you already submitted a ticket. Due to high volumes of tickets, you need to have some patience in getting yours answered

2) Don’t blame Anet for your lack of computer security. It’s actually not that easy to steal an account, when the account holder takes care of their info.

You are guaranteed a first response within 24 hours. Since your account was hacked today, you are still in the time window and are waiting behind everyove else who send in a ticket (including tickets like the guy who wanted an ecto refund after salvaging one by accident).

If you haven’t already done so you need to check the security of your computer, including looking for a keylogger. After that it’s a very good idea to change your email password in case they hacked that and now have access to personal, private information.

Not a single problem in almost 2 years and recently, in less than 1 month 3 of my friends had their account hacked.

It is obviously a security issue: something ANet is not aware of and can not fix.

Let’s hope they can at least give items back, since they cannot grant accounts’ security.

I’ve already changed password for gw2 and email, already installed an authenticator, the number of account hacked as been increased rapidely in the last months, for somenthing wrong or some security issue there are no other explanation so far i guess, im not blaming anet for the hacking im tryng to evidence the problem that nowdays is much more in evidence

Anziio.8392:

I’ve already changed password for gw2 and email, already installed an authenticator, the number of account hacked as been increased rapidely in the last months, for somenthing wrong or some security issue there are no other explanation so far i guess, im not blaming anet for the hacking im tryng to evidence the problem that nowdays is much more in evidence

The increase in hacked account posts are only evidence that there are a lot of players with subpar computer security issues.

Anziio.8392:

I’ve already changed password for gw2 and email, already installed an authenticator, the number of account hacked as been increased rapidely in the last months, for somenthing wrong or some security issue there are no other explanation so far i guess, im not blaming anet for the hacking im tryng to evidence the problem that nowdays is much more in evidence

Gaile has commented on this: in this thread here
Gaile Gray
ArenaNet Support Liaison
“I want to point out, once again, that a compromise of our system would result in tens of thousands of hacked accounts and thousands of forum threads, not the handful that you see. Again, we’re taking longer (too long, we confess it!) to address compromised accounts. The delay sometimes drives people to the forums, meaning that we see a few threads that in a normal day would not be visible. But we are not seeing dozens, hundreds, or thousands — and that assuredly would be happening with a security issue within our system.”

The “Security Issue” is that lots of people used the same password for everything.
Hackers got that one password that was used for everything from a vulnerable site via heartbleed.
Hackers then simply entered the user name and password and stole the account.

If your account was hacked, it was because YOU didn’t follow the basic rules of using the internet:

#1. LONG passwords + Complexity = Security
#2. NEVER, EVER, for ANY reason should you use the same password twice
#3. Always assume links in emails are BAD, especially if you didn’t request the email.
#4. Every website is infected. Repeat that to yourself. Again. Let it sink in. Every website is infected. What do you do after visiting an infected website? You run a scan. Do it. Do it because every website is infected.

i guess thay can recover my stuff as soon as possible

mtpelion.4562:

The “Security Issue” is that lots of people used the same password for everything.
Hackers got that one password that was used for everything from a vulnerable site via heartbleed.
Hackers then simply entered the user name and password and stole the account.

If your account was hacked, it was because YOU didn’t follow the basic rules of using the internet:

#1. LONG passwords + Complexity = Security
#2. NEVER, EVER, for ANY reason should you use the same password twice
#3. Always assume links in emails are BAD, especially if you didn’t request the email.
#4. Every website is infected. Repeat that to yourself. Again. Let it sink in. Every website is infected. What do you do after visiting an infected website? You run a scan. Do it. Do it because every website is infected.

Incorrect, my account was hacked.

- The email I used, is only used for Gw2 (logging in to play or to these forums)
- Email password was also unique: numbers, + lower/upper case, 17 characters long
- My Gw2 password is completely different from my e-mail password
- The only e-mails I receive on that email address are guild wars 2 news updates or e-mail authentication requests
- From the last point, I never log in unless I have to (email authentication)
- I also have 3 active scanners on my PC at all times (probably overkill)

Security was not the problem, I’d reckon that my security measures are far more strict than others.

The e-mail attached to my Gw2 account was compromised, how did the hacker get a hold of my personal info? It’s only used to log into Gw2, soooo that would obviously peg it as a breach in Anet’s security for the hacker to obtain e-mail addresses.

Some e-mail sites are easier to crack than others. Lets say a hacker has access to 500 different e-mails through Anet’s breach; that doesn’t mean the hacker can gain access to all 500 e-mails. Maybe they can gain access to 100. Either way, the problem originated from the failure to guard personal information.

You can partially blame the user for choosing the wrong e-mail site, but the blame ultimately lies on the entity that fails to keep your personal information safe.

Not sure if you were around back towards the end of 2012, but thousands of accounts were compromised (e-mails included); what’s not to say that people’s e-mails were obtained back then but only used in the past couple of weeks to hack their accounts? Again, this would have been a security breach on Anet’s end due to the failure to protect personal information.

I understand that some people can be blamed due to their lack of care (identical passwords and e-mail addresses), but not all can be blamed. There are people out there who take strict security measures to protect themselves. When they can’t control another entity whom has their personal information, well, it’s really hard to blame the victim at that point.

DeadlySynz.3471:

mtpelion.4562:

The “Security Issue” is that lots of people used the same password for everything.
Hackers got that one password that was used for everything from a vulnerable site via heartbleed.
Hackers then simply entered the user name and password and stole the account.

If your account was hacked, it was because YOU didn’t follow the basic rules of using the internet:

#1. LONG passwords + Complexity = Security
#2. NEVER, EVER, for ANY reason should you use the same password twice
#3. Always assume links in emails are BAD, especially if you didn’t request the email.
#4. Every website is infected. Repeat that to yourself. Again. Let it sink in. Every website is infected. What do you do after visiting an infected website? You run a scan. Do it. Do it because every website is infected.

Incorrect, my account was hacked.

- The email I used, is only used for Gw2 (logging in to play or to these forums)
- Email password was also unique: numbers, + lower/upper case, 17 characters long
- My Gw2 password is completely different from my e-mail password
- The only e-mails I receive on that email address are guild wars 2 news updates or e-mail authentication requests
- From the last point, I never log in unless I have to (email authentication)
- I also have 3 active scanners on my PC at all times (probably overkill)

Security was not the problem, I’d reckon that my security measures are far more strict than others.

The e-mail attached to my Gw2 account was compromised, how did the hacker get a hold of my personal info? It’s only used to log into Gw2, soooo that would obviously peg it as a breach in Anet’s security for the hacker to obtain e-mail addresses.

Some e-mail sites are easier to crack than others. Lets say a hacker has access to 500 different e-mails through Anet’s breach; that doesn’t mean the hacker can gain access to all 500 e-mails. Maybe they can gain access to 100. Either way, the problem originated from the failure to guard personal information.

You can partially blame the user for choosing the wrong e-mail site, but the blame ultimately lies on the entity that fails to keep your personal information safe.

Not sure if you were around back towards the end of 2012, but thousands of accounts were compromised (e-mails included); what’s not to say that people’s e-mails were obtained back then but only used in the past couple of weeks to hack their accounts? Again, this would have been a security breach on Anet’s end due to the failure to protect personal information.

I understand that some people can be blamed due to their lack of care (identical passwords and e-mail addresses), but not all can be blamed. There are people out there who take strict security measures to protect themselves. When they can’t control another entity whom has their personal information, well, it’s really hard to blame the victim at that point.

Actually, that’s just proof that your own personal security wasn’t good enough. If your e-mail was hacked, and (assuming) you only used it for your GW2 account, that means you have a keylogger installed. Pretty simple explanation. Please don’t blame your hacks on a non-existent Anet breach.

Smooth Penguin.5294:

DeadlySynz.3471:

mtpelion.4562:

The “Security Issue” is that lots of people used the same password for everything.
Hackers got that one password that was used for everything from a vulnerable site via heartbleed.
Hackers then simply entered the user name and password and stole the account.

If your account was hacked, it was because YOU didn’t follow the basic rules of using the internet:

#1. LONG passwords + Complexity = Security
#2. NEVER, EVER, for ANY reason should you use the same password twice
#3. Always assume links in emails are BAD, especially if you didn’t request the email.
#4. Every website is infected. Repeat that to yourself. Again. Let it sink in. Every website is infected. What do you do after visiting an infected website? You run a scan. Do it. Do it because every website is infected.

Incorrect, my account was hacked.

- The email I used, is only used for Gw2 (logging in to play or to these forums)
- Email password was also unique: numbers, + lower/upper case, 17 characters long
- My Gw2 password is completely different from my e-mail password
- The only e-mails I receive on that email address are guild wars 2 news updates or e-mail authentication requests
- From the last point, I never log in unless I have to (email authentication)
- I also have 3 active scanners on my PC at all times (probably overkill)

Security was not the problem, I’d reckon that my security measures are far more strict than others.

The e-mail attached to my Gw2 account was compromised, how did the hacker get a hold of my personal info? It’s only used to log into Gw2, soooo that would obviously peg it as a breach in Anet’s security for the hacker to obtain e-mail addresses.

Some e-mail sites are easier to crack than others. Lets say a hacker has access to 500 different e-mails through Anet’s breach; that doesn’t mean the hacker can gain access to all 500 e-mails. Maybe they can gain access to 100. Either way, the problem originated from the failure to guard personal information.

You can partially blame the user for choosing the wrong e-mail site, but the blame ultimately lies on the entity that fails to keep your personal information safe.

Not sure if you were around back towards the end of 2012, but thousands of accounts were compromised (e-mails included); what’s not to say that people’s e-mails were obtained back then but only used in the past couple of weeks to hack their accounts? Again, this would have been a security breach on Anet’s end due to the failure to protect personal information.

I understand that some people can be blamed due to their lack of care (identical passwords and e-mail addresses), but not all can be blamed. There are people out there who take strict security measures to protect themselves. When they can’t control another entity whom has their personal information, well, it’s really hard to blame the victim at that point.

Actually, that’s just proof that your own personal security wasn’t good enough. If your e-mail was hacked, and (assuming) you only used it for your GW2 account, that means you have a keylogger installed. Pretty simple explanation. Please don’t blame your hacks on a non-existent Anet breach.

There is no keylogger installed. They are no longer as common or easy to install as you may think (Unless one is a complete dunce).

You also seemed to have failed to read a certain part of my post: 3 active PC scan programs active on my computer at once. One of them happens to be a program our municipality uses specifically built for keyloggers and other malicious attachments one could come across visiting websites. Obviously these are important to protect a city’s confidential files. It’s also been tested by visiting known websites that install malicious software and other crap, but of course, to no avail, no breach.

Also to be on the safe side, the PC was brought in today to scan to see if something breached their software, and low and behold, nothing did, the PC is clean.

Knowing this, there is no keylogger installed, and thus, the personal information related to my account was obtained from Anet’s side. This much I know is 100% true. Now how the hacker broke into my e-mail, well that is a mystery, and I will probably swap to a different e-mail site because I no longer trust the one I’m using. The end result though, the hacker should not have had my e-mail in the first place.

DeadlySynz.3471:

Smooth Penguin.5294:

Actually, that’s just proof that your own personal security wasn’t good enough. If your e-mail was hacked, and (assuming) you only used it for your GW2 account, that means you have a keylogger installed. Pretty simple explanation. Please don’t blame your hacks on a non-existent Anet breach.

There is no keylogger installed. They are no longer as common or easy to install as you may think (Unless one is a complete dunce).

You also seemed to have failed to read a certain part of my post: 3 active PC scan programs active on my computer at once. One of them happens to be a program our municipality uses specifically built for keyloggers and other malicious attachments one could come across visiting websites. Obviously these are important to protect a city’s confidential files. It’s also been tested by visiting known websites that install malicious software and other crap, but of course, to no avail, no breach.

Also to be on the safe side, the PC was brought in today to scan to see if something breached their software, and low and behold, nothing did, the PC is clean.

Knowing this, there is no keylogger installed, and thus, the personal information related to my account was obtained from Anet’s side. This much I know is 100% true. Now how the hacker broke into my e-mail, well that is a mystery, and I will probably swap to a different e-mail site because I no longer trust the one I’m using. The end result though, the hacker should not have had my e-mail in the first place.

You assume your PC security is top notch, yet you got hacked. That only means your security isn’t as good as you thought. An Anet breach would mean thousands upon thousands of accounts would be lost, and you’d be seeing a lot more than a few players complain about it on the forums.

Think of it this way. The players who stand to lose the most, as in the ones with tens of thousands of Gold in their Bank, would have already lost everything. Every single one of them that I know are still going strong. No breach. No hack. It’s because we’re careful about what we do, and have excellent PC security.

Side note – Just because you have a good anti-virus doesn’t mean you’re 100% safe when you visit naughty websites. There’s a reason why anti-virus companies update their virus databases so frequently. It’s because new ones come out daily.

mtpelion.4562:

The “Security Issue” is that lots of people used the same password for everything.
Hackers got that one password that was used for everything from a vulnerable site via heartbleed.
Hackers then simply entered the user name and password and stole the account.

If your account was hacked, it was because YOU didn’t follow the basic rules of using the internet:

#1. LONG passwords + Complexity = Security
#2. NEVER, EVER, for ANY reason should you use the same password twice
#3. Always assume links in emails are BAD, especially if you didn’t request the email.
#4. Every website is infected. Repeat that to yourself. Again. Let it sink in. Every website is infected. What do you do after visiting an infected website? You run a scan. Do it. Do it because every website is infected.

this is BS