Let this be a lesson, I recommend everyone use an Authenticator... because no matter how secure you think you are, there is a high chance it will happen to you.

Hear me out.

I'm very computer savvy, I've been working with computers for 15 years and I know them inside-out. I have built over 100+ computers, I have done networking for 11 years and coding for 4.


My PC? very very secure
My login details? very unique and hasn't been used anywhere else, not on any forums, any games, nothing.

So I'm at work and my girlfriend calls me...

Her: "dude you're online"
Me: "what? I'm at work..."
her: "you're in Gridania... let me see what's going on"
her: "wow you're spamming for gil sales"
me: "wtf.... how could this even happen? let me enable the token, it should boot him off"
her: "yup, you're logged off now"

So i change my password and now this "hacker" can't log into my account because I am secure via password token.

What did I do in the past few days? I'm a PC user but recently purchased the PS3 version and linked it to my PC account so I can play on both machines, that's the ONLY thing I have done recently. I haven't visit any dodgy websites, haven't installed any software or run into any problems with my PC...and my guess would be that these "hackers" somehow got my account via PSN, because we all know how useless PSN is with security.

My question to Square is... who's to blame here? PSN? You? Me?

I have emailed Square but my ticket isn't showing up on the support-page, I'm hoping they still received it.

Is there counter-measures for this stuff? I'm assuming hundreds of people have black-listed me now :\ will there be a black-list wipe so all those people that were hacked aren't on ignore by half the server?

tldr: get an authenticator, don't be foolish.