Blizzard’s super secure online service – yes, the one that often requires external authenticators – has been hacked, with sensitive user information having been compromised.
In a statement on their site, Blizzard’s Mike Morhaime said:
“This week, our security team found an unauthorized and illegal access into our internal network here at Blizzard”.
Global Battle.net users’ Email addresses – along with their personal security questions and answers have been compromised. In addition, North American battle.net players have also had their passwords, albeit scrambled, leaked.
“Based on what we currently know, this information alone is not enough for anyone to gain access to Battle.net accounts,” Morhaime urged. “At this time, we’ve found no evidence that financial information such as credit cards, billing addresses, or real names were compromised. Our investigation is ongoing, but so far nothing suggests that these pieces of information have been accessed,” he added.
Blizzard’s remained quiet on just how many accounts had been affected, but considering it’s the portal through which World of Warcraft, Diablo 3 and Starcraft 2 are played, it’s potentially in the tens of millions
Blizzard insists you probably have nothing to worry about though, because its passwords are secure; “It…means that each password would have to be deciphered individually,” Morhaime said.
“As a precaution, however, we recommend that players on North American servers change their password. Moreover, if you have used the same or similar passwords for other purposes, you may want to consider changing those passwords as well. In the coming days, we’ll be prompting players on North American servers to change their secret questions and answers through an automated process. Additionally, we’ll prompt mobile authenticator users to update their authenticator software.
“We take the security of your personal information very seriously, and we are truly sorry that this has happened.”
Blizzard forced 10 million players online to play what’s primarily a single player game (Diablo III’s still sans PvP) and now the service through which it runs has been hacked. I think the company’s somehow managed to piss away gamers goodwill with Diablo III – and its next game’s going to be a bit of a harder sell. Anyway, it’s probably a good idea to change your Battle.net password.
Last Updated: August 10, 2012