x-box live accounts...
Has anyone else here had their banking info hacked as of around Thursday last week?
A good friend and I both had charges show up to Victorias Secret and Att, and somewhere else, in the hundreds of dollers on Thursday and Friday last week.
The only thing we have in common financially is we both had our cards at some point on Xbox live. (I was ( Read more... )
http://www.hackedonxbox.com/
This site was started by someone who was pretty deeply affected by MS's lax phone security. It's basically not a true... hack of sorts, but rather, someone socially engineering your info to MS and getting your login credentials changed pretty easily.
There is a chance it wasn't MS, but some questions- do you all have your Live accounts linked to Facebook? Is your email authenticated at all(I highly rec using a gmail with SMS or Smartphone Google authenticator), or anything else where your info may show up in an online search related to your Gamertag?
This is definitely a part of the reason I haven't been active on Live in forever. They are refusing to acknowledge that in other countries, US accounts are being compromised... loaded with MS points and even retail games and family plans via the stolen account's payment method(that hurts the user), and then they sell them on auction for less than what you were charged... because hey, they didn't have to pay a cent.
The only known way to combat this is to try and not link info about a Gamertag to an address, name, or number and all that online, and to use the prepaid cards... which completely negates you being able to do a family plan as well. It's just so ridiculously stupid that they refuse to acknowledge their phone support system needs to be seriously examined and re-evaluated. Sometimes, even with doing this- the social engineers also take prepaid game time accounts since they usually have arcade games linked with them to sell, or if someone has a very-sought-after Gamertag username.
That's for if it was XBL. Which, there is a decent chance- but since the charges are not on XBL, this is quite confusing. I think the easiest fix will be getting new cards and card numbers sadly. It does seem more likely someone snagged them somewhere else, but that is not to say that XBL compromises don't happen at all, which MS likes to believe and tout.
They really need an optional smart phone authenticator for Live, or something.
Reply
Leave a comment