03.21.2007 XBOX LIVE ACCOUNTS HACKED AND STOLEN
Over the weekend there were a few people shouting "OMG, hackers have taken over all of Xbox Live," and everybody just laughed. Seems like there actually is a problem with a few of the six million Xbox Live players online, and the number of complaints is quickly spreading. It started with rumors that a portion of Bungie.net was hacked - people would call Xbox 360 customer service numbers to help figure out why their account had been hijacked, with their credit card used to buy excessive amounts of Microsoft products, and every time customer service would blame the problem on the credit card company.
In the last few days they're finally admitting there's an issue, but still aren't pointing to any solutions. For many players, the complications go as far as talking shit online to a random gamer as usual, but then finding out their opponent wasn't joking when he said he'd hack your account. For other players, that was just the beginning:
"I have been involved with Microsoft Support for days on this exact issue and have spent many hours on the phone trying to prove to them that, first, my Windows Live ID was stolen and, second, the ID and password associated with my ID were changed; two actions that Microsoft swears can NEVER happen; and third that the thief was able then use my credit card information associated with one of my Windows Live ID accounts to purchase over $800 of Microsoft products.
Thank goodness for other websites that still contained my old Windows Live ID information and also the fact that, in order to gain access to those other websites, you NEED a Windows Live ID. After spending over 20+ hours on the phone with support and finally getting them to realize that I did indeed have a Windows Live ID, after pointing them to the other websites, I was told by a supervisor that "Yes, in fact, we have heard of some instances where a user's Windows Live ID had been compromized!"
After finally getting this confirmation and having a case number assigned and forwarded to Microsoft Security Investigations, they, also, confirmed it as a breach, issued me another Windows Live ID and then reinitialized the stolen Microsoft Products that were associated with the old ID over to the new ID."
There's even a clan offering to perform the service, claiming to have successfully hijacked seven different accounts of whiny players. So far Microsoft has changed its stance now that complaints are escaping online forums and appearing across the Web, but they aren't giving us an update on how huge of a problem this is. At first they insisted it must have been players who gave out too much information online to their opponents, but it's clear that they're being silent for now until they know exactly what is going on. We probably won't get an update from them until the problem has been solved, hopefully more news will come later today.