Guild Wars 2

So I tried logging in several times and it says either my username or password is wrong. I signed in to my email and got this msg twice from arenanet:

“A log-in attempt from the following location is currently awaiting your authorization.”
Address: 71.236.145.81
City: -blank-
Region: -blank-
Country: -blank-

Apparently someone just knows my log-in credentials (both email and password) then somehow my own password is changed or refused. The hacker is from US, I’m from Asia.

My PC is clean, my password for GW is unique. I’d appreciate an official response too. Thanks.

read this if you havent.

https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

tccwang.4501:

read this if you havent.

https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

It doesnt explain how hackers are(still) able to target any player they want to gain access to his/her account in a couple of minutes.

Gaile Gray.6028:

Yes, it does. There are millions of “known passwords” and these situations generally fall into the category of someone using a password used elsewhere. Please review the article for more information.

Gaile, to gain access to one’s account hacker should know at least target’s correct e-mail and they were able to get even those who created new e-mail just for this game. And they are able to get this crucial info in a couple of minutes.

I can remind you of authorized networks appearing from nowhere, e-mail change feature that sent confirmation e-mails to new address instead of old one, two-factor authorization that never works etc. There were plenty strange implementations concerning account security to this date and i wouldnt be surprised if there are more.

So my position that there is hole in authorization process still stands. Mentioned article doesnt explain things above. Also there is “real example” of user’s password in that article when such info should be available as plain text for nobody, even devs – they (should) get hashes of passwords at best.

I’ve read the link before and also consider myself competent enough online. This is actually the first time an online account of mine is being “hacked”.

Please review the article for more information.

I’d like to know how exactly the hacker accessed my account. If it’s from a single proper login, or trying a variant of a peculiar password which I’ve only used in tumblr (which is still safe). If you can provide some personal uncensored logs, that’ll be great.

Never use the same password for any account you own.