Secure your EA account NOW!

[xGGAx]

My account got hacked today, along with many, many others.

 

 

I wanted to play some Battlefield 1 but my password was rejected. I clicked on "forgot my password" and I noticed I had 2 confirmation emails. One from the current request, and one from 7am.

So after getting into my account I noticed my security question was changed to something in Russian.(I dont even speak russian).

 

I did some googling and it turns out Im not the only one...Many others are having trouble accessing their accounts.

On top of that most info got published in a russian forum (not sure if Im allowed to post the name here, but I wont). 
All account info, including real name, games, join date, and more was made public. Some people are reporting unauthorized purchases as well.

 

More reports.

https://www.reddit.com/r/origin/new/

 

In the end I was able to get back my account thanks to tech support. I was on hold for like 30 min, but in the end they did fix my issues.

So if you have an Origin/EA account, make sure you have a secondary email enabled and/or two step verification.

 

TLDR:
Many EA accounts got hacked, if you have one, please enable two step verification.

 

[vanished]

If you didn't have two step on, this was inevitable, not really news worthy.

[comicsansms]

I have a feeling your email is gone. Check your sign in history on your email, you'll be shocked.

[Strayan_Hades]

4 minutes ago, Ryan_Vickers said:

If you didn't have two step on, this was inevitable, not really news worthy.

Sadly that's a 100% true. Worst case is Uplay... go onto youtube and search uplay free accounts. IT WILL SHOCK YOU!

[vanished]

Just now, Comic_Sans_MS said:

I have a feeling your email is gone. Check your sign in history on your email, you'll be shocked.

Hm, I wouldn't go that far... let's just say I have reason to believe this likely happened independently of that.

[xGGAx]

1 minute ago, Ryan_Vickers said:

If you didn't have two step on, this was inevitable, not really news worthy.

I disagree.

1. A massive hack is always news worthy

2. I had a secondary email setup and got deleted. 

3. My intent is to prevent others

2 minutes ago, Comic_Sans_MS said:

I have a feeling your email is gone. Check your sign in history on your email, you'll be shocked.

that email is my google account, probably the most secure account I have. No strange activity so far.

I wish I could post the name of the russian forum so you can see this is a massive hack with many accounts, not just mine.

[desertcomputer]

Go head hacker go play my free game which i got from origin store.

 

I mean i don't have any of my credit detail link to pretty much any account, apart from paypal which can easily be chargeback. 

[comicsansms]

Just now, Ryan_Vickers said:

Hm, I wouldn't go that far... let's just say I have reason to believe this likely happened independently of that.

You'll be fine, i know you have 2FA on everything, and you'd probably track them down and kill them, if someone was to hack your account. (Or just ban them on the forums)

 

[vanished]

5 minutes ago, xGGAx said:

I disagree.

1. A massive hack is always news worthy

2. I had a secondary email setup and got deleted. 

3. My intent is to prevent others

1. I guess if it really was a lot of people and not just you, thaat's true.  If so, I expect we'll see articles about it on major news sites soon enough.  Alternatively, it's possible that there's so many accounts being hacked on a daily basis that it just seemed like a lot of people when you searched, but that the current level actually isn't above the noise.
2. A secondary email, ok, but was it used for two factor?
3. Yeah I guess that's a good idea, remind people to secure things properly.

[SansVarnic]

I will have to check on this but I have 2FA turned On on my account... I have my SWTOR key chain lol.

[Valkyrie Lenneth]

its not the first time ea gets screwed by russian hackers

 

dont put sensitive information in ur ea account, simple

[xGGAx]

@SansVarnic According to EA no 2FA for secondary email, only to reset password (stupid if you ask me) :

 

Quote

Add a Secondary Email to your EA Account 

 

A secondary email helps you reset your password if you’re locked out of your EA Account and primary email address.

 

 

[SansVarnic]

1 minute ago, xGGAx said:

@SansVarnic According to EA no 2FA for secondary email, only to reset password (stupid if you ask me) :

Yup

[mjwitz]

What I heard is that they got the security questions to peoples accounts and used that to break in to accounts. And what they are doing is getting fifa along with micro transactions with stolen credit cards. After the charge back happens your account gets banned unless you play the money. 

[8uhbbhu8]

hmmmm so thats why i've been having issues logging in.... (only to update things really lol)

[vanished]

1 minute ago, xGGAx said:

@SansVarnic According to EA no 2FA for secondary email, only to reset password (stupid if you ask me) :

Lots of services offer a variety of ways to secure your account, and then additional features that let you bypass those security measures making it pointless.  You see this because most people simply aren't organized and responsible enough to actually keep track of their information properly, and if they were to secure their accounts properly, it would only be a matter of time before they accidentally locked themselves out with no way back in.  Ultimately, choosing secure settings that will keep an attacker out also means choosing settings that increases the risk that if you mess up, you lose it, end of story.  For those who can handle it properly this is fine, but many cannot, and they know this, so they offer ways for people to weaken their security in order to avoid getting too many complaints and help requests asking for help on how to get back into an account they lost.