Microsoft Xbox account hacked. First time dealing with this sort of thing. (1 Viewer)

[ClownCausedChaos2]

I'll try and keep this to the highlights. Any suggestions would be greatly appreciated, as I've never dealt with this sort of thing.

Overnight, I received an email that my Microsoft password has been changed. Shortly after that I received an email that a digital gift card has been purchased. When I woke up this morning, I immediately changed the password.

Later on today, I received an email that online access to my credit card has been locked due to too many unsuccessful login attempts. This is not the credit card linked to the Microsoft account, but I do receive updates on the card to the same email account to which my Microsoft account is linked.  

I called the credit card company to have the card cancelled. I called Microsoft and add the purchase credited.  Purchases through the Xbox are linked to my wife and I's main account at our bank.  I have changed that to a secondary account that we have for the house.

I called our bank as sort of a heads up. They did not see any other fraudulent activity nor did anyone try to access that account. I changed the online banking login and password anyway.

So, I have changed the Xbox login information, my email password, cancelled the credit card and change the information, and changed login information for our main bank account. I have also disassociated our Xbox account with our main bank account.

I plan to be hyper-vigilant with our accounts in the near future, but I'm hesitant to start yelling at the sky is falling, closing accounts, opening fraud cases, etc.  I think that might be overkill at this point and cause more of a headache than necessary.

Does anyone else have any experience like this?

 

[The Tick]

I'll try and keep this to the highlights. Any suggestions would be greatly appreciated, as I've never dealt with this sort of thing.

Overnight, I received an email that my Microsoft password has been changed. Shortly after that I received an email that a digital gift card has been purchased. When I woke up this morning, I immediately changed the password.

Later on today, I received an email that online access to my credit card has been locked due to too many unsuccessful login attempts. This is not the credit card linked to the Microsoft account, but I do receive updates on the card to the same email account to which my Microsoft account is linked.  

I called the credit card company to have the card cancelled. I called Microsoft and add the purchase credited.  Purchases through the Xbox are linked to my wife and I's main account at our bank.  I have changed that to a secondary account that we have for the house.

I called our bank as sort of a heads up. They did not see any other fraudulent activity nor did anyone try to access that account. I changed the online banking login and password anyway.

So, I have changed the Xbox login information, my email password, cancelled the credit card and change the information, and changed login information for our main bank account. I have also disassociated our Xbox account with our main bank account.

I plan to be hyper-vigilant with our accounts in the near future, but I'm hesitant to start yelling at the sky is falling, closing accounts, opening fraud cases, etc.  I think that might be overkill at this point and cause more of a headache than necessary.

Does anyone else have any experience like this?

I had the exact same thing happen to my PlayStation account a year or so ago.  Same thing, just started to get e-mails from playstation that my e-mail address and password were changed and I was locked out.  Had to work with PS to get my account back.  Luckily I didn't have any bank/CC info stored on that a account, so that wasn't a concern, but I did use that password elsewhere so I had to do a full password reset/diversification on all my online accounts.

Since then I haven't had any additional problems, but have had a mess of a time keeping track of different passwords, sometime I need to look into a good password storage solution at some point.

 

[Sullie]

Enable mult-factor on anything and everything you can, here's how to do it for Microsoft XBone - https://blogs.technet.microsoft.com/canitpro/2015/06/17/step-by-step-enabling-multi-factor-authentication-on-xbox-one/

Set it up for your online baking, gmail, amazon, e-bay, paypal, EVERTHING, it's a very simple, safe, FREE security measure.  If you can't figure it out, google it and if that doesn't work, call the provider and ask them how and if they don't have it, why then ask them when they will!

 

[ClownCausedChaos2]

Enable mult-factor on anything and everything you can, here's how to do it for Microsoft XBone - https://blogs.technet.microsoft.com/canitpro/2015/06/17/step-by-step-enabling-multi-factor-authentication-on-xbox-one/

Set it up for your online baking, gmail, amazon, e-bay, paypal, EVERTHING, it's a very simple, safe, FREE security measure.  If you can't figure it out, google it and if that doesn't work, call the provider and ask them how and if they don't have it, why then ask them when they will!

Thank you

 

[ClownCausedChaos2]

I had the exact same thing happen to my PlayStation account a year or so ago.  Same thing, just started to get e-mails from playstation that my e-mail address and password were changed and I was locked out.  Had to work with PS to get my account back.  Luckily I didn't have any bank/CC info stored on that a account, so that wasn't a concern, but I did use that password elsewhere so I had to do a full password reset/diversification on all my online accounts.

Since then I haven't had any additional problems, but have had a mess of a time keeping track of different passwords, sometime I need to look into a good password storage solution at some point.

Yeah, it's a huge pain in the ###.

 

[Rustoleum]

Happened a few years ago to our XBox. Pretty sure the gamer tag was obtained from EA or Origin or some other site where when you bought a new game and created an account on there, you got “exclusive” gear for the game. They got hacked, the password got brute-forced, and some scummy Russians go ahold of the account.

Anyway, I fortunately received e-mails whenever something was bought on the account, and I began seeing some alerts for a bunch of  FIFA purchases and they spent some Microsoft $ that was on the account.

Unfortunately at that time it was nigh impossible to remove your card from the account once it was on there without putting a new payment method in, or it wouldn’t have been there at all.

Anyway, Microsoft’s fraud people were awesome. I got a new credit card. Everything was returned, and there will never be anything but a prepaid gift card or code on our Xbox again.

 

[ClownCausedChaos2]

Happened a few years ago to our XBox. Pretty sure the gamer tag was obtained from EA or Origin or some other site where when you bought a new game and created an account on there, you got “exclusive” gear for the game. They got hacked, the password got brute-forced, and some scummy Russians go ahold of the account.

Anyway, I fortunately received e-mails whenever something was bought on the account, and I began seeing some alerts for a bunch of  FIFA purchases and they spent some Microsoft $ that was on the account.

Unfortunately at that time it was nigh impossible to remove your card from the account once it was on there without putting a new payment method in, or it wouldn’t have been there at all.

Anyway, Microsoft’s fraud people were awesome. I got a new credit card. Everything was returned, and there will never be anything but a prepaid gift card or code on our Xbox again.

Yeah, this sounds exactly like what I'm going through.  Microsoft was awesome.  They refunded the gift card without asking any questions.  

I'm continuing to get emails from different online accounts, stating that it's been locked due to too many successful login attempts.  I just go in and unlock them.  I'm not always changing the password, though.  Like the one guy at the credit card company told me, "it's up to you if you want to change your password.  But honestly, they've shown they don't know the one you have now, so you may want to consider keeping it."   I've got to assume that with so many billions of people on the internet, the person/people will eventually give up trying g to access my things and move on.  Just have to closely monitor everything right now.

 

[Mike Damone]

This happened to me overnight. Woke up to find my Xbox,PlayStation, Steam, Comcast email and Instagram all hacked. 

Spent 50 minutes on phone with Sony , can’t find a number to speak to a live person from Xbox. Steam answered my email and helped recover my account and it looks like my old Instagram is lost