Also Hacked

I just logged on today to find all my gil missing, as well as all my items in my inventory except a few and a lot of my armors and weapons taken from me.

I've changed my password now anyway and I know there is nothing anybody here can do, but does anybody know how they are getting access to these accounts?

I've never used the password I am currently using for anything else and it's a pretty secure password.

Generally they get it from another website, such as fansite forums or places like that. They could also use keyloggers or phishing websites, and they could have other sources as well. It's hard to say all of their resources, but they get the password from other places.

That's rather annoying.
Hopefully I'll get my stuff back :(

Phished or keylogger. Scan your computer.

That's impossible though. I always use on-screen keyboards to log in after one previous incident a long time ago and I've never had an E-mail from "Square Enix" where it's ever led me to type in a password.

I also got hacked....i think square enix had a security breach and they are lying about it. only FF site i visit is this one and PW is not on any other account.

do you actually get yer stuff back or does square enix give u the big F U?

I sent in a ticket and haven't heard back yet, we'll soon see I guess.

Quote:

---

Originally Posted by Matthew_John

I also got hacked....i think square enix had a security breach and they are lying about it. only FF site i visit is this one and PW is not on any other account.

do you actually get yer stuff back or does square enix give u the big F U?

---

No. If you or anyone else uses the same email address (OR SCREEN NAME) and password on any 3rd party site that has been hacked, then your password is potentially know to 3rd parties. If you use a simple password like a name, or number that can be associated with you, your password is easily guessed through a dictionary attack. Neither of these things re Squsre Enix's fault, and given that Square Enix has already been targeted before by hackers and has considerably hardened their login security as well as adding security token options, accusing SE of lying about something is really off base. I work in network security, and a keylogger, phishing, compromised 3rd party site login or simply a hacked 3rd party site are the most likely sources for the password for your account. How is Supposed to "give you your stuff back"? It's not their fault you used a crap password.