The account I'm on has been hacked!

[Mirasol-mannoroth (Mirasol)]

@Sprocketpop-dalaran

but I fear that their may have been a data breach on their part and they’ve failed to protect their customers.

1. Legally, any company experiencing a breach of personally identifiable information must, by law, disclose that in an expedited way to the impacted consumers. Failure to do so results in huge legal issues, fines, and opens a company to lawsuits. Blizzard has not experienced any loss of data that included name, address, financial information, etc. Other game companies have paid millions in files for not disclosing in a timely way.
2. In 2012 there was a partial breach of front facing login data from the authentication server. That included email address, secret question, encrypted passwords (not plain text), and some digital authenticator serial numbers. That was rapidly verified by Blizzard, communicated to customers, and customers were prompted to change their account details. Because rapid action was taken and the passwords were encrypted, no accounts were breached. No real names, addresses, or financial information was revealed.
3. Blizzard does not ever store our ID on file there. The laws on personally identifiable information are pretty tough. Blizzard deletes the ID once the ticket is resolved. They also have the passwords stored as salted hash that not even staff have access to. They don’t have access to our financial info either.

@Sprocketpop-dalaran

The email your account (battle.net) is associated with, and your name. All it takes is someone to create a fake ID, and send that in, followed by the: “I forgot my email,” button on Blizzard’s website. Once they have that, a Game-Master (Blizzard Employee) simply sends them the account reset information, and the hacker is in!

No, it is not that easy. The ID has to match the account details on file and Blizzard won’t just “give them information”. They have to remove the Authenticator in addition to changing an email. None of this is done lightly. Someone having a legal Govt issued ID matching the account details - impersonating you, is not something Blizzard can control.

@Sprocketpop-dalaran

I personally feel violated and disgusted that Blizzard Entertainment has failed to protect their consumers

@Sprocketpop-dalaran

My account which has had this ongoing issue for years

This is very much an issue with your personal data security. They did not get any of your information from Blizzard. Further, what info they have can pass an ID challenge. Blizz does not lightly change account emails/remove authenticators.

The issue here is that someone else is using an ID in the name of the account holder, which you claim to be. Blizzard does take further steps in cases where a dispute is ongoing, besides just the ID. To gain control that person is passing those challenges as well.

Keep in mind, accounts with repeated restorations, where access disputes keep happening, can be closed permanently. Account security is the responsibility of the account holder.

Example: This person also had their account “compromised” several times (sold) - they have most of their Blizzard games now banned and WoW suspended for 6 months. There is a quote from the GM in the thread.

Account hacked

Whew, here we go I took a break from WoW in shadowlands era and had taken several prior as well. During one of those occasions (around 2010 maybe?), I received an email about a password change. I was busy with college and for some reason ignored it or forgot—it was some time ago. My account was a) been merged with another account and b) banned. The general events followed: First, I emailed blizzard (I may have called too but I can’t remember). I was asked for password, account name, real name…

Best of luck securing your computer, personal information, and accounts. WoW should be the least of your concerns given someone else has your ID.

Start here https://www.identitytheft.gov/#/ and make sure to also lock down all your credit agency things too. That website from the FTC will help.