Blizzard account access attempt

[Hoofy]

Help us keep your Blizzard Account safe with a security check
Hello Darren!

We wanted to let you know about a recent login attempt with your Blizzard Account.

You’ll receive this email again if your login process changes slightly, like when you use a new computer to log in to Blizzard services.

If you didn’t attempt to log in, please change the password for your Blizzard Account. We suggest changing the password for your Blizzard Account’s email account as well.

Regards,
Blizzard Entertainment

---

Surely, if I'm getting this it's because they FAILED to access my account and therefore my passwords don't need changing?

[Tycho]

I've received quite a few of these recently as well and when I login I can see that the email address has been changed so I just change it back again along with the password. It is very strange, have you checked the email address on the account?

[Hoofy]

Tycho said:

I've received quite a few of these recently as well and when I login I can see that the email address has been changed so I just change it back again along with the password. It is very strange, have you checked the email address on the account?

That's worrying. Everything is fine except one password reset request by the other person meant I had to change it back.

[Tycho]

Hoofy said:

Tycho said:

I've received quite a few of these recently as well and when I login I can see that the email address has been changed so I just change it back again along with the password. It is very strange, have you checked the email address on the account?

That's worrying. Everything is fine except one password reset request by the other person meant I had to change it back.

Yeah, it doesn't seem like a particularly good system but I would recommend getting the Blizzard authenticator app. It's a shame that they don't us the Google or Microsoft authenticator but it should add the extra layer of security needed.

[geeks]

Hoofy said:

Help us keep your Blizzard Account safe with a security check
Hello Darren!

We wanted to let you know about a recent login attempt with your Blizzard Account.

You’ll receive this email again if your login process changes slightly, like when you use a new computer to log in to Blizzard services.

If you didn’t attempt to log in, please change the password for your Blizzard Account. We suggest changing the password for your Blizzard Account’s email account as well.

Regards,
Blizzard Entertainment

---

Surely, if I'm getting this it's because they FAILED to access my account and therefore my passwords don't need changing?

It's possible the authenticated successfully but the system detected it was unlikely to be you and blocked the actual login.

For example:

You log in from London at 13:05 GMT

At 17:07 GMT "you" attempt to login from China. The system will know that you simply cannot travel that distance in that time frame so will block the login attempt and alert you.

This is an over simplified example but you get the idea.

[Hoofy]

Oh I see.

Amusingly, I just got the same message from Pistonheads:


PistonHeads
PistonHeads: Forgotten Password
Dear Hoofy,

We recently received a request to reset the PistonHeads user account associated with this email address. You can reset your password by following this link:

Your old password will no longer work after this submission.

If you have not requested a new password, do not click the link but email [e-mail] to alert us of this matter.

Regards,

The PistonHeads Team.

---

Guess someone is taking the piss.

[geeks]

Hmmm might wanna pump your email address into here: https://haveibeenpwned.com/ will tell you if your email and any cred might have been compromised!

[Durzel]

Might be worth changing your actual email password too, on the basis that someone thinks they might be able to access the account to validate a password reset attempt.

[Hoofy]

geeks said:

Hmmm might wanna pump your email address into here: https://haveibeenpwned.com/ will tell you if your email and any cred might have been compromised!

Thanks.

[Hoofy]

Durzel said:

Might be worth changing your actual email password too, on the basis that someone thinks they might be able to access the account to validate a password reset attempt.

It's got some app validation thing as well so they'd have to nick my phone? *glances out of the window*

[geeks]

Hoofy said:

Durzel said:

Might be worth changing your actual email password too, on the basis that someone thinks they might be able to access the account to validate a password reset attempt.

It's got some app validation thing as well so they'd have to nick my phone? *glances out of the window*

[Hoofy]

Not seeing anyone in a sheepskin coat.