Guild Wars 2

Forwarded message —-———-
From: ArenaNet <noreply@guildwars2.com>
Date: 2012/9/17
Subject: The e-mail address for your Guild Wars account has been changed
To: …………………..

Someone -hopefully you!- has requested to change the email address associated with your Guild Wars account.

Need help or have questions about your Guild Wars account? Visit our support site: http://support.guildwars2.com/.

Thanks!

-The ArenaNet Team

This is original (without my email ofcourse) message.
This message was the first and only one after purchasing confirmation with my “serial”
and my account name confirmation email.
My email acc. have sms login confirmation (as 2nd factor) so…

Explain me somebody, how is it possible to hackers to change account name without any confirmation request?
Is this my fault or AN fault?
Edited by moderator: demanding language

The fact that hackers were able to log in to your account (ie. the fact that they knew your email address and password) and make this change, is probably your own fault… I suspect that you have already used the same email address and password for another game, another website or another forum in the past.
The fact that this account name change was possible without any additional verification, was ArenaNet’s fault. But they have already taken action there:

From the Game Status updates:

We’re temporarily disabling account name changes for accounts with validated email addresses. Thus, users with validated email addresses whose accounts are hacked will in most cases be able to recover their own accounts using the reset password functionality linked above.