Compromised Account Reports [merged]

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Gaile Gray

ArenaNet Communications Manager

Next

If your account was compromised (hacked), please post in this thread. You will find helpful information from Support, the means to contact them, what to tell them when you get in touch, and more.

  • Contact Support and file a ticket through the “Ask a Question” tab on that linked page.
  • For tips on what information to provide in a ticket, please read this post.

Players can also help other players with information about how they handled their account compromise. I ask only that you keep the thread positive and helpful towards one another and towards those who are or will be doing our best to help you.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

(edited by Gaile Gray.6029)

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: hummmm.6834

hummmm.6834

So I just got hacked yesterday and my character got cleaned out. Can I get a reroll so that i get my items back? I’m lvl 80 and i actually give a $%^& about my items. i was almost full exotic, (missing 2 pieces, and yes i know it’s nothing compared to legendary.) Not only do I want a reroll I also want to know how I got my account compromised in the first place, and I am seriously wondering if Arena Net has been Compromised (much like how Blizzard was compromised earlier this year. Ex. Blizzard’s statement of them getting compromised, and also the well-known exploit that allowed people to access other’s battle.net account without needing pw or account name.)

Before you go “Oh it’s your own fault” hear me out. I’ve been a internet gamer for ~8years now and I know what gets your account hacked. I don’t give my password or my login out to anybody. I don’t visit gold sites, I don’t click on links and log in to my account on any website. I didn’t even log into my account on the guild wars 2 site. And heck i’ve been busy with school and playing other games that I haven’t touched this game for 2 weeks. 2 weeks later and i try to log in, and i got hacked the night before. And no i haven’t visited any random sites and got a virus, keylogger, trojan, etc I have been doing nothing but logging into games on my comp, I’ve been logging into game clients and not websites.

I Know i don’t have a keylogger, because no other account of mine has been hacked into, including bank accounts, paypal, all my other gaming accounts, etc.
This is my first game, and my only account out of the dozen or so games that i play.
I have ran virus scans, not only quick scans, but full computer virus scans. I’m using programs like Malwarebytes Anti-Malware,etc.

Also I have had no notification of unauthorized access from different IP address. My first and only email from Arena Net was at 10-20-2012 @ 2:50 in the morning, and that was to inform me my email was changed. After i got my account back and attempted to log-in, then i receive a notification of a different access from an IP address and it was my own IP. So why did i not receive an email notification when my account was accessed by somebody else in the first place?

If I do not receive a character reroll, I would really like reasons posted on here why I shouldn’t. I am 100% certain no problems came from my end, as i have only logged onto game clients from my computer. I’m 100% certain it is not my fault. I hope that Arena Net will reroll my char to a previous date, and that Arena Net will look into any form of being compromised, and look into any available exploit that allows people to access your account without needing your password, and/or your account name. (Any Diablo 3 player should have known/ heard of the things that happened to Battle.net.)

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Moderator.6837

Moderator.6837

Hello,

At the moment, our customer support team is not able to do character roll-back. Nevertheless, a similar feature will be implemented in the future, but not for one character, only for your entire account.

Thank you for your understanding.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Felicus.6218

Felicus.6218

Some one is on my Account with the IP and Location WA , US (70.32.34.197) please fix this, i have been fighting them and the Chinese players off my account, no one knows my ACC info and this computer is clean k thanks bai! :D

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Felicus.6218

Felicus.6218

Admin/Gamemaster please Send me a email or something about this there still on my Account.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Felicus.6218

Felicus.6218

(Code=7:11:3:189:101) can i get some help ?

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Soulblazer.3105

Soulblazer.3105

Better send asap a ticker from here https://en.support.guildwars2.com/app/account/support/session/L3RpbWUvMTM1MDg2NTI4MC9zaWQvQk83eGlqOWw%3D . Select hacked account and fill as much information as you can, as this ticket directly informs ANet and they will take action as soon as they see it. Also see if you can enter your account from the site, go to Security tab and press log out to the suspicious IP and after that change your password. Also I’d suggest you to enable e-mail or mobile authenticator to prevent unauthorise access to the account.

(edited by Soulblazer.3105)

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Cappz.6973

Cappz.6973

About 5 minutes ago I tried to log in to play and I got an error saying that I engaged or assisted in the trade of gold and gems for real world money. I then checked my Email address and saw that I had gotten four messages saying that someone from (see below) was trying to access my account from another area and needed confirmation. I pressed deny and there was an error. Putting 2+2 together I realized that someone from China hacked me and messed with my account, framing me to make a quick buck. I understand that this is in no way NCsoft’s fault and that account is probably trashed by now, is there any way you guys can help a man that had been convicted under false pretenses?

Address: 113.240.223.88
City: Changshahsien
Region: 11
Country: CN

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Felicus.6218

Felicus.6218

IP Adress 70.32.34.197
State: Washington
Town: Seattle
Postal Code: 98168
He lives on 34th Ave South Behind the USCIS Application Center
his Physical Latitude is 47.4891
his Physical Longitude is -122.2908
if i can find all of this you should be able to fix my Account…

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Soulblazer.3105

Soulblazer.3105

I’m not an ANet employee but I also had a similar problem in the past I sent a ticket from this site. A responce came really fast and I took my account back without any damage of loss.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Felicus.6218

Felicus.6218

well i have done everything i can posably do, besides taking a 1 hour 30 min drive up to his House and wooping his six. i keep geting an error code (Code=7:11:3:189:101) and can not kick him off my account and hes been on all day and i have even changed my password multiple times.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Soulblazer.3105

Soulblazer.3105

This code according to GW2 support page appears when there are anti-virus/firewall problems or when there’s a blocked port in the router that blocks access. As you already have played some time it can be a port except if you changed router. Try restarting your client and temporary disable your anti-virus and firewall and if that doesn’t work, try to put gw2 to firewall’s exceptions. As you changed your password multiple times it may not be someone else in the account except if with some way your pc is infected with a keylogger.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Felicus.6218

Felicus.6218

nope still not working, and i have not downloaded anything on this computer yet exept for GW2

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: HawksClaw.8461

HawksClaw.8461

My wife’s account was hacked on the 17th of this month. She found out when she check her email and saw an email stating the email address associated with her account has change. “Hope this was you” ….Really…. Hope this was you ….. what is that, a bad joke. Well not laughing… She has opened a ticket with customer service and keeps getting the same automated response asking for information to verify the she is the one who purchased the account, she has give the information each time and still waiting… The major flaw is that Anet allows email changes without verifying the the email holder is doing it. It is a major hole in your security.

Any help from Gaile Gray or any other moderator would be appreciated.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

Some one is on my Account with the IP and Location WA , US (70.32.34.197) please fix this, i have been fighting them and the Chinese players off my account, no one knows my ACC info and this computer is clean k thanks bai!

Please note that while the team is very prompt in answering tickets, they cannot do so instantly. And posting multiple times in the forums about an individual account compromise is the wrong way to get it addressed. You must contact Support directly for help. Use the “Ask a Question” tab to submit a ticket.

For tips on how to expedite the help that you receive, please see this post.

And please not: locator software is not so fool-proof that you can know with certainty about a hacker’s location. Share the information you have with Support, by all means, but I suggest not trying to solve this face-to-face. It’s far, far too risky in the sense of possible error.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

(edited by Gaile Gray.6029)

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

My wife’s account was hacked on the 17th of this month. She found out when she check her email and saw an email stating the email address associated with her account has change. “Hope this was you” ….Really…. Hope this was you ….. what is that, a bad joke. Well not laughing… She has opened a ticket with customer service and keeps getting the same automated response asking for information to verify the she is the one who purchased the account, she has give the information each time and still waiting… The major flaw is that Anet allows email changes without verifying the the email holder is doing it. It is a major hole in your security.

Any help from Gaile Gray or any other moderator would be appreciated.

What is the 12-digit ticket number? I can check into this tomorrow, but if the ticket is more than 3 days old — and I suspect it is — I’d appreciate if you post in the “Tickets for Review” sticky thread at the top of this sub-forum. I will do what I can to help!

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Sjha.2468

Sjha.2468

I just logged onto my guild wars 2 account after takeing a two day break, and recived the notification to change my password.

I changed my password, and procided to log in… when i got onto my (Main) character, i realised shes not in the same place i left her..i then also realized i had no money left (roughly 70 silver, and 100 gem)

Then i noticed…all the items in my inventory were also gone, with the exception of the equiped gear.

worried, i run to the nearest crafting station to check my bank; several items i had been saving (Such as upgrades) were gone, and a HUGE portion oh the crafting materials i had built up..

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

Please immediately contact Support directly for help. Use the “Ask a Question” tab to submit a ticket.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: HawksClaw.8461

HawksClaw.8461

ticket number is 121022-000090.

Thank you Gaile

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

About 5 minutes ago I tried to log in to play and I got an error saying that I engaged or assisted in the trade of gold and gems for real world money. I then checked my Email address and saw that I had gotten four messages saying that someone from (see below) was trying to access my account from another area and needed confirmation. I pressed deny and there was an error. Putting 2+2 together I realized that someone from China hacked me and messed with my account, framing me to make a quick buck. I understand that this is in no way NCsoft’s fault and that account is probably trashed by now, is there any way you guys can help a man that had been convicted under false pretenses?

Address: 113.240.223.88
City: Changshahsien
Region: 11
Country: CN

I agree that it sounds very much like your account was compromised. I suggest you contact Support directly for help. Use the “Ask a Question” tab to submit a ticket.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

ticket number is 121022-000090.

Thank you Gaile

Ok, that ticket was filed within the last couple of hours. I am confident you will hear from the team very soon.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Atreyu.3486

Atreyu.3486

Ok guys its pretty obvious that the guild wars game is having a major hacking issue right now. I am reading these forms and hundreds if not thousands of players are getting banned accounts for "taking part in or assisting in gold or real money trading etc…

Would someone please kindly release some form off statement as soon as possible to let everyone including myself know what the issue is and how you plan on rectifying it…we all love guild wars very much and this experience is begging to tarnish it.

Thank you.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

Ok guys its pretty obvious that the guild wars game is having a major hacking issue right now. I am reading these forms and hundreds if not thousands of players are getting banned accounts for "taking part in or assisting in gold or real money trading etc…

Would someone please kindly release some form off statement as soon as possible to let everyone including myself know what the issue is and how you plan on rectifying it…we all love guild wars very much and this experience is begging to tarnish it.

Thank you.

What you are stating is not true.

Accounts are stolen every day. It’s a sad fact of life that players use passwords on multiple locations, use a weak password, share their account, or do something else that results in the account’s theft.

We have not experienced a security issue. These are individual issues. And while you’re seeing perhaps a dozen posts a day about this subject, hundreds of thousands of people are playing without incident. I believe that Mike O’Brien stated that the percentage of people whose accounts were hacked was about one tenth of one percent of all account holders.

Please do not post alarmist comments about “major hacking issues” that do not exist. Each person whose account was compromised should submit a ticket to Support and, for faster service, should provide the information in the “How to submit a ticket” thread above.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: selfdisplaced.5781

selfdisplaced.5781

I’ve been playing just fine since day one (well actually since the betas) and my account has not been compromised.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: asobinin.5467

asobinin.5467

Such a coincident that this topic is created on the date that my account got compromised.

When I tried to log on just right now, this whole thing about “verifying my account” thing came up. I followed the steps, reset my password, and then I logged in, just to find that my character’s inventory and gold was wiped. Equipped items (although 1 main-hand weapon missing) were intact, so as my bank stuff.

I don’t use passwords on multiple locations, I don’t believe my password is particularly weak, I haven’t shared accounts, nor have I done anything in particular that would result in my account’s theft. Thus, the above comment from Gaile Gray, given my current situation, is a bit annoying to me at the moment. While I know this world isn’t a perfect place, and A-net doing their best (hopefully) to catch those kittens, as a player, it just sucks to have your account abused, and especially when you didn’t do anything weird to get your account compromised, the statement “These are individual issues.” is just a slap in the face. I used to be one of the “hundreds of thousands of people” playing without any incident, and bam, today, I’m on the other side of the fence.

I’ve been playing MMOs since Ultima Online, and this is the first time I got hacked. So please do tell me what wrong I have done. I already filed a ticket, so I’ll just wait for a response. Meanwhile, is it safe to keep on playing on my account?

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: JWolf.4817

JWolf.4817

I hope that this thread means that my wife’s situation can be remedied.
It’s obvious at this point that her account was hacked and that the hacker tried to use stolen credit card data to purchace goods from either A-net’s site or through the game and thus resulting in her account getting banned and her being banned from the forums, too.

I do hope her ticket gets re-reviewed and the situation righted, since we’d love to keep playing GW2. And yes, since we had lot’s of free time during the weekend, I ran a thorough check on her system with several anti-virus and malware removal softwares, with nothing being found. She also went and changed her passwords to pretty much everywhere, just in case.

Her ticket number is 121016-002257.

Gaile, if you could comment anything on her situation, I’d be so delighted.

Thanks,

-JW-

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: LucasClarkel.1648

LucasClarkel.1648

I was hacked recently and my account was banned for selling gold or in game items for real money. This happened after I got some emails from arena net saying my account was attempting to be accessed from China, so I changed my password and a day or so later it said my account had been banned. I am stille waiting for a support response my ticket number is [Incident: 121020-000624]

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Zeral.8249

Zeral.8249

Error Code: 45:6:3:2114

My account was hacked and is now “permanently banned” under the terms of gold selling being under the rules of conduct.
I may have posted my ticket into the wrong area but I sent my whole details into the forums. My Email is Abyssal15@hotmail.co.uk

I can’t however display my own key I used to create the account as I did it digitally and my email box was wiped a long time ago.
One of my characters is F A Y N E
Erm… if there are any other details I can post on here without my accounts more confidential details being put on let me know please, i’ve been waiting for 2 weeks for a responce.

Dan.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: LeoDeSol.7604

LeoDeSol.7604

Ok guys its pretty obvious that the guild wars game is having a major hacking issue right now. I am reading these forms and hundreds if not thousands of players are getting banned accounts for "taking part in or assisting in gold or real money trading etc…

Would someone please kindly release some form off statement as soon as possible to let everyone including myself know what the issue is and how you plan on rectifying it…we all love guild wars very much and this experience is begging to tarnish it.

Thank you.

What you are stating is not true.

Accounts are stolen every day. It’s a sad fact of life that players use passwords on multiple locations, use a weak password, share their account, or do something else that results in the account’s theft.

We have not experienced a security issue. These are individual issues. And while you’re seeing perhaps a dozen posts a day about this subject, hundreds of thousands of people are playing without incident. I believe that Mike O’Brien stated that the percentage of people whose accounts were hacked was about one tenth of one percent of all account holders.

Please do not post alarmist comments about “major hacking issues” that do not exist. Each person whose account was compromised should submit a ticket to Support and, for faster service, should provide the information in the “How to submit a ticket” thread above.

Note, I have had no issues and I use the authentication app now as well. However, just want to point out that a lot of post have been made about this (not all), by people who seem to at least have a moderate sense of PC security, report using a fresh password with GW2, etc. Just a reminder, that not to long ago, a very big AAA mmorpg released with a flaw that allowed major account thefts (http://rift.zam.com/story.html?story=25684) that the devs didn’t see. In fact, they regualarly told users their passwords where not strong enough, gave pointers on account security, etc. before a user finally figured out the issue Rift was having was a client side hack….

Not saying it is the case with GW2, and if it was something similar, turning on email confirmation or 2-factor authentication probably stopped it for a majority of the player base. Just, don’t be too quick to rule out that there maybe more than meets the eye with account thefts.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Jareth.4813

Jareth.4813

If it were a hack on Anet’s side, would not the problem be far more prevalent than just 0.1% of the population?

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: asobinin.5467

asobinin.5467

Can A-net trace back where those stolen items/gold has been traded off to?

It’s one thing A-net being unable to reimburse stolen items/gold, it’s another issue if A-net has no means of tracking stolen items/gold to punish those criminals.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: LeoDeSol.7604

LeoDeSol.7604

If it were a hack on Anet’s side, would not the problem be far more prevalent than just 0.1% of the population?

Who knows. IF there is a problem on Anet’s side or with the client itself, it does not have to be the same problem, could be different in nature completely. Rifts was so prevalent because you did not even need to know a username at all. You could basically use the exploit to get access to random accounts and see what they had on them of value. Exploits and cracks come in so many different forms, perhaps if someone needed to know the email, but could bypass the need for a password.

But this is pure hypothetical discussion. I just wanted to point out that it is by no means unheard of for this kind of thing to happen. There is so much money in RMT that there are probably 1000s of people constantly trying to break the system or get your account details at any given time.

In fact, I would love to see some write ups and interviews with/by the security people working for companies like Blizzard, ANet, NCSoft, etc.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Terena Soon.4312

Terena Soon.4312

My account has been compromised. I been locked out of the game for 4 days now.

My incident number is [Incident: 121019-000100]?.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: jmotuck.4276

jmotuck.4276

My account has also been locked under the conditions of gold sales and I have never done this in my life! I take pride in earning the equipment I obtain for use.

Incident Reference Number: 121022-000253

I am absolutely infuriated that some fools hijacked my account! and caused me to get banned! I have no possible clue what damages have even been done to the countless hours I have spent in Guild Wars 2 for the past nearly 2 months. Please Help!

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Lord Melchior.7216

Lord Melchior.7216

I got an E-mail today asking me to authenticate a login attempt. I had not played GW2 all day.

The following location was specified:
Address: 112.98.67.52
City: Saerhtu
Region: 08
Country: CN

Saerhtu appears to be a city in China. Obviously I don’t know anyone in China since I live in the Netherlands, so this was obviously an attempted hack of my account. I have changed my password immediately, but I just wanted to report this here so the GW2 team can stop a threat.

Attachments:

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

If it were a hack on Anet’s side, would not the problem be far more prevalent than just 0.1% of the population?

Yes, exactly. This is not an issue with ArenaNet, NCSOFT, or Guild Wars 2 security. Each of these cases is individual and each of them needs to be addressed privately with the account owner by submitting a ticket on the “Ask a Question” tab of the support page: support.guildwars2.com.

Everyone — this thread is not intended to address your account issue. We are not encouraging people to create a ticket and post here — there’s absolutely no need to do that because the team will work with you individually on your personal account issue. I created this thread as a housekeeping measure and to let you know we will help you! But it’s truly not productive to post random threads on the forums about the subject.

You need to contact Support and they will help you.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

(edited by Gaile Gray.6029)

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Clouded Judgement.7834

Clouded Judgement.7834

I had a similar IP address try to access mine last night after i signed out too.

Address: 117.81.59.17
City: Beijing
Region: 22
Country: CN

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Clouded Judgement.7834

Clouded Judgement.7834

Coincidentally after the patch yesterday my account was tried to access as soon as I exited the game? How did they get my password, its been safe for so long. Also how did they know to try log in as soon as I logged out?

The only change was the password warning.

Address: 117.81.59.17
City: Beijing
Region: 22
Country: CN

My password should have been secure and I never used it anywhere else before.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: yaztromo.8457

yaztromo.8457

Ticket Number: 120930-002598 and 121016-000298

I was one of the first to report that my account had been hacked, and I was always told that he would have no tool to recover my lost items, now I see this thread, my question is:

Can I use this service in my account, even though almost one month I was hacked and lost my pre legendary item The Lover and other items?

Do not mind having to roll back a month to recover from my account just like there was 1 month ago.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Reekinhavoc.6204

Reekinhavoc.6204

My account was hacked yesterday, I got my account back using support, but my account was stripped of mostly just money. I hope that I can get this back, the last I logged on besides just now to confirm my suspicion of theft was right before the halloween event started yesterday 8:45ish EST Monday 10-22-12.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Jhenn.5197

Jhenn.5197

I too took a break for a few weeks and came back to a compromised account. I play other mmo’s and understand how this works. I use different passwords, only use my phone or laptop to acess the web so ther is no way this pc has anything on it plus it is very well protected and scanned weekly for any virus,maleware ect.

I had a large amount of items and crafting amterials taken as well as transmog gear and all my gold.
It was not a large amount but it was hard to accumilate. I am very unhappy that there is no way to restore items or accounts like in other games when it it obvious that the account was compromised and I never recieved an email regarding account information either i just found out when reading an arena net email reagarding the holiday events and wanted to check it out but am now very discouraged seeing everything i worked for gone.
They even left my toon missing half her gear.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Simon.9752

Simon.9752

How do they chinese hackers know my password? This is scary, I’m sure I dont have a keylogger on my system cause I dont download anyhing !%#$. I’m using same password for other accounts and services so that maybe explains why they have my passsword but they could also have brute-forced my password which contains numbers only. The email authorization services is very good for protecting accounts….

Address: 182.33.36.137
City: Beijing
Region: 22
Country: CN

Address: 60.5.67.200
City: Hebei
Region: 10
Country: CN

(edited by Simon.9752)

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Plaguedispenser.6071

Plaguedispenser.6071

Just got an e-mail from your authorization service.

A log-in attempt from the following location is currently awaiting your authorization.

Address: 121.24.25.97
City: Handan
Region: 10
Country: CN

I immediately denied access and ran to change my password. They must have had my information for a significant amount of time because A) I don’t use that password for any other account and B) I haven’t logged in for 3-4 days.

Point of the story

Thank you for offering this service and saving my account!

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Artermis.6792

Artermis.6792

Hello,

It seems my account has possibly been compromised, however i cannot tell as i cant even login.

When i do try and login, i get a message basically saying ‘Your account has been terminated due to selling gold for real life money!’.

I have not, and would not do so. I have played this game from the start (daily) and always played by the rules.

I have raised a ticket to find out what is going on.

However, i would add. A few days ago i tried to buy gems using the ingame trading post and my credit card failed, due to my card supplier thinking the transaction was possible fraud. They telephoned me to check, and i say its fine its me and they said the transaction will go through as normal. I have not received the gems.
Has this got something to do with it?

Additionally looking in my email, i can see someone from china tried twice to login to my account but failed.

My ticket number is: 121024-002169

if someone could assist, it would be appreciated.

thanks
[edited] i changed my login password immediately after seeing the login denial, just incase.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: failbot.5043

failbot.5043

So, I also had an unexpected visitor …

A log-in attempt from the following location is currently awaiting your authorization.

Address: 116.252.249.71
City: Nanning
Region: 16
Country: CN

This location is approximated based on information provided by your Internet Service Provider. If in doubt, deny the request and try again.

I’ve changed PW and added a mobile authenticator … but it’s still highly annoying.
It would appear that no damage has been done however, so I’m well pleased with the email verification system thus far.

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Spigget.7296

Spigget.7296

My account was hacked a few hours ago and so once I filled out a ticket (#121025-000483) I received an email with a recovery link. What I’ve done so far is to reset my passwords for everything and I’ve also managed to add the Authenticator to my account.

My brother sees my character online and so what I attempted to do was log in hoping to boot him off because I’m logging in with a higher level of security, unfortunately that was not the case. I then found the option under My Account to ‘Disconnect’ the hacker but in turn received:

Page not found

Host
account.guildwars2.com
URL
/account/security/disconnect

JsSrv3/6253001.16765 Instance/14.371072092

I’d at least have my character back if the Disconnect worked but now I have to wait till they log off in order to do so =(**

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: DIMH.5362

DIMH.5362

My account was hacked about an hour ago and I feel completely violated.
I was playing in the Cursed Shore, doing the Plinx quest when I was booted and a message popped up saying that another client had logged in. I told my friends in Mumble as much, and ran to get my phone to set up the authenticator (trying to log back in without it was unsuccessful).
I logged in within about 2 minutes of the initial logout with the newly-acquired mobile authenticator, and found my character at the bank in Lion’s Arch. I checked the bank and nothing was missing (although the fact they were at the bank tells me they were about to empty all of my lodestones/ecto/etc.), but whoever hacked the account took out about 17 gold. For some reason they left about 38 silver.
What’s more annoying about this is that I had set up the mobile authenticator 2 days ago but was getting kicked every half hour so unlinked it from my account.
I’m a dedicated fan of Guild Wars since the release of Prophecies, and really need some help with this.
I know you probably can’t reimburse my 17 gold, but I would like to know what is being done about this and that the person who took my gold will be caught.
I am not the biggest safety geek out there, but I am by no means negligent.
Please help!

Cheers,
-DIMH

D I M H — Human Engineer [GT]
Henge of Denravi
“Express Delivery”

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Next

As an answer to the general question, yes, when we discover that an account was compromised, we investigate thoroughly and do our very best to track and close all accounts involved. I can remember a case when one reported hacking resulted in 38 closed accounts!

While it’s true that we do not have the capacity to restore (roll-back) accounts quite yet, we will be able to restore accounts in the future. We are very excited about this, because it will mean that innocent victims who request the service immediately following return of access will suffer fewer ill effects from an account compromise.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Pewbz.1762

Pewbz.1762

My friend got his whole GW2 account hijacked by someone and it seems like the matter hasn’t been resolved by the Anet team. He kindly request that someone actually can do something about it so he can get his account back. There has been several attempts to resolve the issue, but without any help.

<-Regards

[Incident: 121026-001289]
Spiros.3956

Compromised Account Reports [merged]

in Account & Technical Support

Posted by: Hijynx.6109

Hijynx.6109

My account got hacked as well as my email address (just got a new one, the guy changed my questions and the whole ordeal) Just got my account back, but I want to request an Email change so he doesn’t come back. Also I’m missing some crafting supplies and money, nothing too big though just 50 silver. No real need to reroll me, I’m only lvl 35.