Quote (zetsubl @ 30 Mar 2020 17:20)
have you already reported this to blizzard?
I have not, but plan to. You're welcome to copy paste what I wrote there. The more complaints they get, the more likely they are to look into it. I'd suggest going the ticket route vice forum posting.
Quote (treezin @ 30 Mar 2020 19:38)
Call your network provider and tell them you have been compromised to an extent you don't know and you suspect you are being ddos. They will help take care of the situation in a legal manner.
Might it be good idea for people to change there passwords for other things like email, etc? Ya know, incase one is same for another game or service?
Thank you for sharing awareness and whatnot.
Yes, it's a good idea to change your 1) registered recovery email pw and 2) bnet account pw in addition to your 3) d2Acc pw.
Two factor authentication should be used for both emails. These two passwords should be unique, that is, your recovery email, bnet, and d2 accounts should be three distinct, (long) passwords not used anywhere else.
The reason for this is that the Hackers have access to multiple tables within the breached database: one that lists d2AccName/pw pairs (we know this for sure), and at least another that lists d2AccName/hashedCD-Key/emailThaHashedCD-KeyIsRegisteredOn(bnetAcc)/bnetPW (not 100% certain but extremely likely) The recoveryEmailforD2AccName is also very likely to be on one of these two tables.
If your password is the same for one of these three identifiers, the hacker can try the same password for your other unhashed (not encrypted) data and gain full control.