How are they hacking my brothers account

[Xendros]

If it's anything like WoW and GW2 they can bypass the login system completely. My WoW account was frozen at one point after Cata launched and gold sellers managed to add free game time to my account while it remained frozen. Not once did I get a notification about my password or email being changed. In fact my account was still frozen when I finally called Blizzard to reclaim my account and get it unbanned. The status changed from banned back to frozen.

*Conjecture*
I suspect the gold sellers have created a script that can access the character database and look for accounts that don't have authenticators tied to them in WoW. From there they use another program to add free game time and change the character status to logged in. Then they just use a modified client to use the account they've jacked and go about their gold farming and selling.
*End Conjecture*

It's possible the same thing is happening here in FF14. I seriously doubt so many have been hacked due to user error.


EDIT: I should also add that the Blizzard rep I talked to the phone told me directly that game time had been added to my account. I asked how that was possible considering my account was frozen and I was never notified for a change in account status. He couldn't/wouldn't give me a straight answer. He only helped me recover my account, add a new authenticator and restored all my items and gold.