Interesting Email From Blizzard

[Toff]

I haven't played WoW in about a year.

Yesterday I got an email that a battle.net account was made in my old WoW email address by a person called Zhang.

Luckily I had switched my wow account long ago to a unique email address that I only used for wow and nothing else at all.

Just checked my real battle.net account and everything looks fine. Somehow they got my old address (they must have stored it for years) that used to be linked and tried to get into my account with it.

So, if anyone hasn't linked their battle.net account to a unique email that ONLY does battle.net, do it now. I'm pretty sure it saved me, not that I have anything in it worth much as I stopped playing before Cat.

[Biff The Understudy]

Something similar recently happened to me:
Got an Email from blizzard about a GM ticket from my accout wich asfar as i knew had been inactive for over 6 months.
Turns out someone had gotten into my email and used a "free week" code blizz apparently sent me several months ago then managed to get into my wow acc (on the same email) and proceeded to delete my gear, steal all my gold etc etc.

So using a unique email for your battlenet acc is not a bad idea at all.

Wont protect you from a keylogger but atleast they wont be brute forcing your email.

[Biff The Understudy]

New development:
On my Gmail account wich was linked to my hotmail account i just got an email claiming that Zhang had created a wow account using that email.
Checking the logs it appears that the account has been accsessed at 15 minute intervals for the last 48 hours so it seems to be some kind of bot.

[Cm]

It's been a long time, close to a year, when Blizzard had their email list hacked and several accounts where hijacked. A few people had their email addresses stolen also. Blizzard suggested then people not answer any emails claiming to be from them unless you initiated contact first. Also be sure to change your password at least, if not setting up a new email to use with your account. Hackers and scammers seem to be trying to use those stolen acct infos again.

[Biff The Understudy]

That would explain it then. Thanks for the info :)
Only safe course seems to be abandoning/deleting the compromised emails as they appear to have a bot attempting to brute force the passwords.