Passing On Knowledge

[grigorian]

Well I feel I need to share...

I was a bonehead and used the same user name and password for both LoTRO and AION. AION was hacked I got lucky and was choosen as a target and someone grabbed my HOTMAIL account.

They stole the AION account, which NCSoft made ULTRA difficult to recover, but I had already canceled the account and had call my credit card company to insure that no charges from NCSoft would not be approved.

On the 21st of December I logged into LoTRO and everyone of my characters had all of their non-bound items taken and almost all of my cash as well. Needless to say this was VERY annoying. Turbine has been excellent and though I have not gotten my stuff back I have gotten some extra cash to replace the missing items, kind of like an insurance check

So please let this serve as a warning. Do NOT use the same password and user names for games that you use on other games, message boards or even email services.

I am in good shape in LoTRO, I could care about my AION account, so all in all, this has just been a big pain.

Grig

[Morreion]

That's terrible, Grig!

Good to hear that Turbine helped you out and that you have money back I know you've put a lot of effort into your LOTRO characters. This is a very good tip, I'm going to pay closer attention to security for sure...sounds like gold sellers to me

[Rakul]

Damn. I wonder how the heck they do that!

[Jaema]

That's too bad and scary. I wonder how they got the Aion account info. And I'm wondering if they only got user name and passwords ? Not our cc info ? My account is closed too but obviously that didn't matter.

[Morreion]

Oat found this link:

www.killtenrats.com/2010/01/01/happy-fun-security-issues/

[Regolyth]

Jan 7, 2010 9:30:19 GMT -5 Jaema said:

That's too bad and scary. I wonder how they got the Aion account info. And I'm wondering if they only got user name and passwords ? Not our cc info ? My account is closed too but obviously that didn't matter.

Your CC information is most likely, very safe. That information is, to my knowledge, stored more securely, and probably on a different server. It's also (or at least should be) encrypted more heavily. And once you canceled your service, your CC information should have been wiped (or never stored to begin with, unless you gave them permission).

[Morreion]

Good to know, Rego. I'm going to start changing my passwords when I leave a game, too. Having a 'maybe I'll come back some day' password as well as regular passwords.

[Regolyth]

That's a really good idea. I might do that as well.