While I understand your frustration, Sprocketpop, please watch the language. Using an asterisk as one of the letters is still considered profanity, just masked.
Now, from what I can see, Sprocketpop, your tickets have been answered. I can see three tickets that were submit from the same IP you are posting from, which have been responded to.
If you are not receiving those replies, I’d recommend updating your email password as well, just in case the ones that compromised the account have access to it.
Yes, but it is encrypted, and not accessible to outside parties. Credit Card information isn’t even visible to our employees. Additionally, your ID has not been saved to our logs. If you submit an ID it is used for verification and then it is deleted. That is covered by rules and regulations that all US companies must abide by.
The last reply I see is asking for verification, and should have been sent to the gmail address you provided in your ticket.
Legally, any company experiencing a breach of personally identifiable information must, by law, disclose that in an expedited way to the impacted consumers. Failure to do so results in huge legal issues, fines, and opens a company to lawsuits. Blizzard has not experienced any loss of data that included name, address, financial information, etc. Other game companies have paid millions in files for not disclosing in a timely way.
In 2012 there was a partial breach of front facing login data from the authentication server. That included email address, secret question, encrypted passwords (not plain text), and some digital authenticator serial numbers. That was rapidly verified by Blizzard, communicated to customers, and customers were prompted to change their account details. Because rapid action was taken and the passwords were encrypted, no accounts were breached. No real names, addresses, or financial information was revealed.
Blizzard does not ever store our ID on file there. The laws on personally identifiable information are pretty tough. Blizzard deletes the ID once the ticket is resolved. They also have the passwords stored as salted hash that not even staff have access to. They don’t have access to our financial info either.
No, it is not that easy. The ID has to match the account details on file and Blizzard won’t just “give them information”. They have to remove the Authenticator in addition to changing an email. None of this is done lightly. Someone having a legal Govt issued ID matching the account details - impersonating you, is not something Blizzard can control.
This is very much an issue with your personal data security. They did not get any of your information from Blizzard. Further, what info they have can pass an ID challenge. Blizz does not lightly change account emails/remove authenticators.
The issue here is that someone else is using an ID in the name of the account holder, which you claim to be. Blizzard does take further steps in cases where a dispute is ongoing, besides just the ID. To gain control that person is passing those challenges as well.
Keep in mind, accounts with repeated restorations, where access disputes keep happening, can be closed permanently. Account security is the responsibility of the account holder.
Example: This person also had their account “compromised” several times (sold) - they have most of their Blizzard games now banned and WoW suspended for 6 months. There is a quote from the GM in the thread.
Best of luck securing your computer, personal information, and accounts. WoW should be the least of your concerns given someone else has your ID.
Start here https://www.identitytheft.gov/#/ and make sure to also lock down all your credit agency things too. That website from the FTC will help.
Check your junk folders and as Vrak mentioned, it’s CRITICAL that you update/change your current email information as it’s possible that whomever has gained access to your accounts might in fact have gained access to that as well and might be manipulating your email.
I would consider this a top priority along with as others have mentioned, securing your system and doing the security stuff from another system until you are no longer comprimised.