Just thought I’d add my two-cents that I too have been gaming online for 10 years without being hacked, until I started playing GW2. My account was compromised and I lost everything, I did a full security scan of my PC which revealed nothing. At the time I was not using the mobile authentication but I have never had any trouble in the past by using just email authenticating.
I do have one idea of how this came to be, but it’s rather a coincidence then hard evidence:
On the 4/11/12 I tried to access GW2 Guru but google blocked the site saying that it had come under malaware attack, at the same time I was not playing GW2 that week but when I came back my account of cleaned out and had an email in my inbox saying someone from China logged into my account on the 4/11/12 (same time GW2 Guru was attacked) also, every email from ArenaNet was deleted including the serial key email. Thankfully Hotmail was able to restore deleted ‘deleted’ emails so I was able to make a full recovery.
Password time, ok so my password for GW2 Guru was a variation of my email password (different numbers/capital letters) so I can assume that one possibility was the hackers brute force hacked my email. Although GW2 Guru ‘claim’ that the ‘attack’ on the 4/11/12 didn’t compromise their databases, I still think it’s too big of a coincidence.
My password for GW2 was again, a variation of my email password (different numbers/capital letters) but I don’t have anything to suggest GW2 databases were compromised, but then again I could be wrong. Before you reply saying that using variation passwords are a bad idea, I can see your point but the fact is that I have had ZERO trouble in the past 10 years of doing so, my email being compromised was a clear leak of someone’s database.
