Got Hacked Thread

wtf quotes not working.
anyways Lowblow how did that happened? do you recall putting info elsewhere your POl?

and did you manage to get any items back from the gms?

you know whats sad? players working harder than SE to help each other with things SE should work on.... thats sad stuff.

{true strike}

Just to add my own experience.
Before the secure token/RSA key was introduced, i was compromised by a flash vulnerability from an ad on mysterytour. Shortly after, i began playing on Linux via WINE. I have not had any problems since, and i use the token.
It was my own laziness that had me not running noscript on my machine in firefox, which due to adobe's lack of giving half a ***about security after buying out macromedia, lead to the compromising of my system.

I was on the phone with SE while my character was still logged in by the RMTs, they were able to lock the account, but i had already lost pretty much everything. It took months to get my account back because, having moved twice since i started, i have lost my original manual and had to send them a sworn affidavit, notarized, to them. they only gave me this option because i was able to tell them all of my character's names, main jobs, levels and the approximate dates which they were created.

playing in Linux adds an extra level of difficulty for your account to be hacked. the RMTs are looking for windows vulnerabilities, mix and match operating systems and program loaders would make them have to guess what you have to even start writing code to infect you.

please excuse my improper grammar, sentence structure and overuse of commas.

you are very correct, it will be extremely hard. but just to point out, a man in the middle attack or packet intercept can get your unencrypted password if POL isnt sending via an encrypted connection.

I also wanted to note that if you are disconnected, and you suspect foul play, IMMEDIATELY spam your POL ID with a bad password, or even good password with a bad token code into POL viewer for about a minute straight.
Attempting to log in with a good POL ID and bad password/token will count as an attempt to log in and kick your account off of any other terminal (as of a few months ago). Do this until your code changes and you should be able to lock them out. though they might have been able to log into the POL website and change your password or even disable the token, im not sure. to be safe, keep failing login untill you get your account locked.

So I just found my account beeing stolen from me. The password has been changed...
So they can now hack accounts that are played on 360 only as well??? How do they do that? Still have all my registration codes so I should get my account back. Still I'm very upset. ;(

Oh and how long will it take about to get my account back if I call them tomorrow?

well, don't forget that all your data is saved on SE and POL's servers, so chances are, 360/PS2 accounts can get hacked too o.o

Damn.. They are getting desperate eh? £50 the source was either China or Korea lol.

Deciding to come back to the game again after 4 months and I found out that my account was hacked yesterday. I was still able to log in and stuff but all my gear was already sold, and apparently they activated my account during may.

I had already called SE and after waiting what seemed like a century, got my account locked for now. What I'm a little curious about is that they sent an email saying that I have to send them a notarized account verification form for them to continue with the investigation.

I'm not familiar with these kinds of situations so I was wondering if having to fill out a form like that normal for this situation?

We have just been alerted to a potential breach of Square Enix’s secure systems from an external source. This may have resulted in the disclosure of a limited number of PlayOnline IDs, passwords and user account data. However, since your PlayOnline ID is linked to your SQUARE ENIX Account, your PlayOnline account was not compromised as a result of the potential breach.

Is what happened. I'd go to the live chat and verify it's your account and reset the password.

How do I get to the live chat thingy? Was trying to look for that the other day but I guess I'm blind or something.

I had already requested for a Game Data Recovery when I called them. When I logged on to my character (which got its name changed) I was standing in front of the delivery npc, naked, with gear already sold. I also changed my info the same day. I haven't played since I canceled my ID this past January, logged on yesterday to find out that I'm paying for my account being active during May w/o my knowledge.

I guess what I'm concerned about atm is that do I have to send that notarized form or would doing that live chat be more beneficial for getting my stuff back the way it was.

Totally got hacked before this whole security breach thing, no idea how it happened. Just logged in one day and my password's changed. I text a friend who was online at the time and he was able to get a GM to freeze my account by giving him some information regarding the character. The part they failed at was when I tried recovering my account after they did a reset on it (took a few days) they reset my password to what it formerly was when it was breached. Well this wasn't smart seeing that hmm the hacker that breached the account knew that password in the first place. I tried logging in after I read the email I'd received from them and not much to my surprise, the password I'd entered was incorrect. Fantastic, and to make matters worse, you're only allowed one full character reset/recovery. I just gave up and told them to cancel the account.

And for the record, I'm back again, for the fifth time.

I just logged out today to restart my desktop for stuff for the second time today, and on the second time I tired to log back in but POL keeps saying my POL PW or ID is wrong. I know they aren't because I haven't touched them in 2+ years. I also haven't received an email from SE yet. I think I got hacked but I have no clue as of yet. :(

Currently having that same issue Tenchu, I think POL is acting up right now. To make sure, go to the Square Enix website and see if you can log in there, I could and that's how I know my password is still correct... But POL is being dumb. >:(

Having the Same issue. Logged last night for work and when i try to get on now get "Playonline ID or Password is incorrect" but I'm able to log into SE account.

So I forgot to check ALL of my emails. I am able to log in after they sent me an email just 2 hrs ago (about the time I couldnt log in). Just be sure to check all of them and be patient I guess :P

Oh so they changed my PW on me. I see. -_-;

I think SE is mailing your new PW through the postal service

Thought I'd post this for ST people.

There's like 30 seconds (I think, can't remember) before your random code disappears and the server resets it. There's a SLIGHT chance of a keylogger sending your code to someone to get into your account before the time is up! Personally what I do is wait to type in the code just before it disappears, that way by the time I log in the code is reset.

Also on a side note, I wonder what the hackers tooks, PWs and account info for sure... I also wonder if they took the algorithms for security tokens as well...

well my account was hacked by PlayOnline. they told me they changed my password, and they wont tell me the new password unless I send them a copy of my drivers license and wait 2-7 business days because I forgot to change my email address with PlayOnline, but it is correct with Square-Enix. so here is a copy of my letter to PlayOnline/Square-Enix.

Hi.

My name is ------------, my PlayOnline ID was --------. I have had this account for about 2 and a half years maybe longer. I have been playing FFXI since it came out in the US.

I have a security token to protect my account from hackers. But I guess it didn’t protect me from PlayOnline resetting my password. After 4 phone calls to support, I was able to reset my girl friends account but I wasn’t able to reset mine because I forgot to change my email address listed with playonline when I changed to a different cable company. I was able to update my email address with Square-Enix a few minutes ago. I think it’s strange that I was able to verify my information to cancel my PlayOnline account, but I couldn’t get my password reset. I could have provided all other information to confirm it was me. But I REFUSE to send you a copy of my drivers license and wait 2-7 days for a problem that I didn’t create and was stated in http://www.playonline.com/ff11us/polnews/news19199.shtml “If you have linked your PlayOnline ID to a Square Enix Account, your account will be safe due to the nature of the information possibly breached. Please be assured that sensitive information such as your credit card number has not been compromised.”

I did have my account linked to a Square Enix account and Playonline reset my password and refuses to give it to me. So I guess my information wasn’t safe.

Well I canceled my account, I was looking forward to the new level cap increase and the new weapon skills and all the new stuff coming out soon. I was also looking forward to FFXIV but not anymore if this is the way you treat you long term customers.

If you would like me back as a customer and want to let me know what MY password is
Please feel free to call me or contact me and I’ll be happy to discuss it.

Name
Address
Cell

You can't just go to the live chat and verify your account there? I don't see how that would be a problem.

Nope they told me I have/had 1 choice to get the account back. send a copy of my drivers Lic. and wait 2-7 days. I talked to 4 different people there.

Do it and get it over with then?

Been on roll back for 11 weeks, almost 12 weeks...
Ever sense it started march 23rd, I been hearing the same ***. "Your account is under the process that's all the information we have... anything else I can help you with."

I Don't call them very often, maybe 2 times a week...
But I'm gonna start calling them more often and bug the ***out of them... at least 2 times per day every day!

Ask to speak to supervisor "I'm sorry he can't accept your call right now...".

this is precisely why when i got my original account back, i just did the server change back to my home server, and didn't bother with a rollback, my gear's far less important to me as getting my original guy back._. though i have to admit, i loathe the idea of saving up for another manteel / minstrel's ring / random gear. But it's better than fighting with SE D: