Square-Enix hacked

[Fiosha_Maureiba]

edit: If the information that was compromised allows an unauthorized individual to log into our character accounts, the damage they *could* sell most of everything you own, trade your tradeables (I'm sure they'll have fun with four items at a time, hahaha ~ ahem, /equip Serious Face :-| )

And this isn't SE specific, so results may vary, but a step further is to lock you out of your own account, change the security questions, and alter the password recovery e-mail. Gives them more time to conduct their unsexy and unauthorized touching of our avatars *compromises a certain translator's subligar security*

A step further is to compromise the e-mail account associated with the main account. And there's a good chance people use the same password for multiple accounts, so it's not too much time to crack it.

Loss of time invested. Frustration of trying to get recovery. Mid-worse case, you're not believed by the company that you were a victim of theft and do not get reparations.

[Antipika]

A security token could be hacked it happen in FFXI many times it's not 100%

It cannot be hacked directly. However your computer can be hacked or you can be redirected to a Phishing website.

Which mean, you -have- to be a target. No one can do a "massive" hack and get access to lot of accounts.

[viion]

Token thing is not even something to debate, if they hacked the server, they could just disable all tokens and pun it will be useless lol. Remember this topic and the incident is about them hacking into the server.

That being said, SE probably have hundreds of servers for all kinds of things, for all we know they could of logged into the server that controls the carpark or something lol. (unless it says XD didnt read it all).

Everythings hackable and its no biggy, and not to troll but i really doubt anyones ffxiv character information is valuable, rmt barely bother with the game these days. FFXI maybe.

[Atoli]

It's just a game account, who cares

What I don't understand though is why people still insist on direct billing from a gaming company after oh so many hacks we had this year..
"No credit card information leaked", and the reason?
Because the hackers just had bad luck and picked the wrong one without credit card information on it.
NOT because this important information is protected better..

[Holy_Dragoon]

Use a password exclusive to 1 account, add in a one-time password dongle. Security profit.

[Atoli]

Use a password exclusive to 1 account.

Square forced me to do it

[BenjiTulia]

My security token has "Made in China" on its back, I'm sure RMT will soon figure out how it works hehe.

[Fiosha_Maureiba]

The maker of the security tokens had a security breach about a year ago. They would need two pieces to make that work though.

The serial number of your token.
And the technology used to generate that one-time password.

And unless they grab more dataR bases linking up your username with your serial number, they probably won't find that out anytime soons.

Identity theft is still serus bizness tho.

I digress, we don't know the specifics of what the infiltrators were looking for. Until SE sends us the warning e-mail, we should try to remain calm...

*gets compromised... in compromising positions*
*takes an arrow to the knee*
*lalafell steals my sweet roll*
*mustard jar...*

[viion]

Why people are talking about security tokens in this thread is beyond me. If you hacked into the server, your dongle is as useless as a slang dongle..

[Fiosha_Maureiba]

Why people are talking about security tokens in this thread is beyond me. If you hacked into the server, your dongle is as useless as a slang dongle..

In terms of logging into an SE account and hijacking a character (deletion, selling everything they own and trading the gil to third-party, etc.)