What to do if You Get Hacked

[Awryt]

This was such a nice summary and collection of useful information that I am posting the complete article here. Thanks to http://wow.com and Robin Torres for putting this all in one place.

Source: http://www.wow.com/2010/01/21/help-m...s-been-hacked/
Help! My account has been hacked!
by Robin Torres
Jan 21st 2010 at 7:00PM

There are so many scams going around like the Catclysm Alpha invite and the WoW Armory phishing site, that people's accounts are getting stolen more than ever. With all of the work that Blizzard has to do to keep up with the problem, it's no wonder they are offering the fast solution of care packages. We've talked about how to avoid scams as well as how to protect yourself. Here is a guide as to what to do if your account gets stolen.

Important note: The following guide assumes that you have not put an Authenticator on your account. There are no confirmed cases of accounts being stolen if they are protected by an Authenticator.

Did the thieves put an Authenticator on your account?

If no, then follow these steps:

1. Try to recover your password: Attempt to retrieve your password using Blizzard's password retrieval form (http://www.worldofwarcraft.com/login.../password.html). If they didn't change the email address registered to your account, you will receive the password in your email.
2. Change your password: Immediately change your password to something you don't use anywhere else and is strong (not a word found in the dictionary, has numbers that are not related to any dates that are important to you). I would also recommend throwing in a capitalized letter or two, but Battle.Net passwords are not case sensitive. (Neither were non-Battle.Net WoW passwords, by the way, so this is not a change.)

If the thieves did put an Authenticator on your account, join the club. It's what they do these days to buy themselves time to rummage through your bags and pimp your characters out to scam others. Do the following as soon as possible:

• Post on the Technical Support forums: Go to the official Technical Support forums (http://forums.worldofwarcraft.com/bo...Id=11110&sid=1) and find the latest blue post that has something about the Authenticator being added. You don't have to enter an Authenticator code to post in the forums, so post from your compromised account in the thread that you need to have the Authenticator removed.

Contact Blizzard by email and by phone.

Even if you have posted on the tech support forums, I still recommend you contact Blizzard redundantly. Just make sure that you mention the other methods you have contacted them as a courtesy.

• Email: You can either email Blizzard directly at WoWAccountAdmin@Blizzard.com or by using their web form (http://us.blizzard.com/support/webform.xml?locale=en_US).
• Phone: Call the appropriate number for you from Blizzard's Support Number list (http://us.blizzard.com/support/artic...rticleId=20606). You may be put on hold for a while and/or be asked to leave a voicemail.

Let your guild know.

While you are spending time getting your account back, the thieves are pilfering the guildbank and sending your friends/guildies tells to go see this really cool video you made. Get on your guild forums and/or vent and tell your guildies to demote and ignore your characters until you get your account back.

Follow Blizzard's instructions.

Blizzard will contact you with instructions on how to restore your account. You may have to provide notarized documentation, which can be scanned and emailed or faxed. Follow the directions carefully, as any missing steps or information will result in even more of a delay.

Get an Authenticator.

You can either order the keyfob (http://us.blizzard.com/store/search.xml?q=authenticator) or download an app for your mobile (https://us.battle.net/account/suppor...h-download.xml) which is cheap to free. If you do not have a mobile which is currently supported by Blizzard and are having trouble getting an Authenticator shipped to your location, then see if a friend, family member or guildie can get one and ship it to you. The device is the same globally and therefore can be activated on your account, even if it is bought by someone in the U.S. and mailed to you. But please do get an Authenticator so you never have to go through this again.

... very intelligent, prepared and careful people get hacked every day. As social engineers get more sophisticated, new security holes are opened up in our lives all the time.

[Skelster]

As a note, the Billing dept. folks are the ones who can actually remove a false authenticator from your account. E-mailing them (billing@blizzard.com) will kick back a reply that the request was received, if you're looking for that verification feeling.