Guild Wars 2

I am sorry for being rude, but this is the last thing I can do for Guild Wars players and ArenaNet. I was a big fan of guild wars, I play gw1 for 7+ years and gw2 till last Saturday (still log in that day).
Last Sunday I got an e-mail, the very only one warning:

“Someone has requested to change the e-mail address associated with your Guild Wars account. The next time you log in to your account, please use the new e-mail address.”

There was not even a warning, confirmation or anything to prevent hacking, it just told me:
“Man, you just got hacked! Your e-mail won’t work from now on”

After contact the support, they slowly recovered my account.
Slow enough for the hacker to strip all my gw1 and gw2 money and items and materials and guild storage(I am a guild leader) and GEMS and everything.

My strong password and the e-mail account are dedicated for GW.
The mobile protection is a joke.
It only prevent myself from logging-in when my cellphone is away.
But hacker can REQUEST support to change my account and you allowed them to do so. Not even warn me via an e-mail at the beginning.

At the first time I didn’t get it, I thought even myself cannot log-in without my cellphone.
Then I checked my playNC master account.
It was hacked too.
I guess the hacker hacked the master account where I purchased gw1 digital edition.
Then the hacker requested to change my gw account e-mail.
And the support let that happen.

One more thing, it is not possible a key logger or something, I didn’t access my NC master account anymore right after I linked gw1 to gw2. (I also changed playNC password, then bought a new computer and never access it again)

Now two accounts are stripped, even my guild is kittened up, my other guilds hate me too.

Support says nothing but my own fault.
And still say nothing about NC master account. (Still hacked, lol)
Even if you can roll back, please convince me to keep playing with despair, how do I lead my guild.

This is a joke.

GW2 has mobile protection, GW1 has in game name confirmation, but NC master account has NONE. And master account leads to gw1, gw1 linked to gw2, they pick the weakest one to hack.

ArenaNet, please show some respects, I am a customer that supports ArenaNet for 8 years.

I have no choice, I must quit the game.

But what I want is an answer, how did that happen and how weak is the flow about false reset REQUEST, no warning at all.

Face your problem! Protect other players.
Admit your fault and deal with it.

There’s no reason to blame Anet for your lack of personal security. Sorry that you lost everything in your Guild bank. Perhaps you should use this as a life lesson to better protect your PC from viruses and keyloggers. Losing your Guild Wars accounts is better than losing your identity, since there’s no Account Restoration for real life.

It’s not “You steal my password” case.
If you didn’t realize what I’m talking about, you are probably in danger, Sir.
That’s why I post here.

If you had a strong password, there’s no way a hacker would take the time to brute force it. That means you either had a weak password, or a keylogger on your PC. Both are the individual’s fault, no one else’s.

If they had a weak system, you would assume A LOT more accounts would be hacked, and a lot more people would be here complaining about lost items. That is not the case. It does show that their system does in fact work, and it must work extremely well.

When I was hacked, the only statement the hacker sent to Anet was, “I forgot my password. Please help me.” Simple and short. Supposedly it came from my email account, but I can not fully verify that, since the only thing I FOUND in my inbox was an email from Anet with a Ticket #, and nothing showing an email sent from my location.

If the hacker was helped by anet, then the hacker received far faster support service, than the actual account owner. With me being the account owner, I found that thought quite disturbing beyond all measure.

The only thing I can say is that my email provider’s service did have a data breach back in December of 2012. But the service provider did not share that information until January of this year. Go figure.

Yay for first post in the forums!

Being an IT worker and a security obcessed myself, allow me to add my 2 cents.

When I contacted support 3 days ago about an item issue, I had to provide full name, DoB and even my CD-Key to prove I was myself.

Then you would say your hacker hadn’t.

A few weeks ago, a friend of mine who hadn’t been playing for about 8 months (and forgot his password), tried to regain access to his account.

He had lost his CD-Key since then, so he had to provide his full name, DoB, email and a hell of other information, including Characters names and full account name (the Name.#### thing).

I find it hard for some one to change your email without having access to your own email, which inplies you didn’t take enough care about your email account and that doesn’t rest on ANet shoulders.

If your problem was with your playNC account and how it gives you full access to its underling GW1 and GW2 accounts, then ANet isn’t to blame either.

Bear with me: NCSoft is the publisher for this game, ANet develops and maintain it. This means ANet is accounted for the game itself and, as far as the game’s account system is concerned, I find it very secure.
The problem rests on NCSoft being a part of this.
You see, I’ve played Lineage 2 for a couple of years, back when it was a monthly sub game. NCSoft NA exceeded on Customer Service back then and no one had problems that didn’t involved a lack of personal security.
Then they flipped their switches and began investing on F2P (more like Pay2Win) for their homemade games (that would be Aion, Lineage 1 and 2 etc.)
This playNC master account was part of this and a huge mistake on itself. Their system has low security on default and didn’t enforced security questions and the like for older players.

NCSoft NA is today but a shadow of what it was. Lineage 2 went downhill, community-wise, especially after the Korean Devs made design decisions that weren’t that great for an NA and EU market.

They manage your playNC account and your GW accounts being linked to that is part of the NCSoft – ANet agreement over the title.

TL;DR: Blame NCSoft for having your playNC account hacked, ANet has nothing to do with it. Watch your email, as most services doesn’t allow email changes without confirmation through the former address. And, of course, steer away from shady 3rd party software and webpages.

Point being, if your account has been “hacked” and there is no surge of players fallen victim of the same thing, it is all on you, for you might (knownly or not) have failed on your personal security.

Also, keep calm and respectful, as I am trying to help and people tend to become angry on forums towards those who go against them.

Feb 11th, 2014

Two hour span, 32 reported hacks.

Those reports were basically placed in the wrong forum, and instead of being changed to Support forum they were deleted. That was also day one of the Cloudflare attack. People are still wondering about that.