After Action Reporter

So I discovered today that my private email address has been used to register for a Battlenet account. I got an email telling me to click to authenticate the registered email, etc etc. So, thinking myself a clever-clogs, I clicked the link while planning to force a password reset on the Battlenet account so as to prevent the account’s use by miscreants and to stop any future use by gold farmers or spam bots or whoever farm these things… well…

BIG MISTAKE. In order to reset your Battlenet password you need to know three things, the email address registered (check!), the first name (“Zhang” was in the email, check!) and a last name. Shit. No last name in the email and ticking “no last name” on the password reset page.

I tried to email blizzard at accounts@blizzard.com, but the auto-reply says the emails are no longer monitored and I should visit the support center and put in a ticket. But first, what would I need to do? You guessed it. Log in.

Shit.

So now some spam bot or gold farmer is happily using my email address to get up to mischief on Battlenet and there’s not a thing I can do about it. Well done, Blizzard, you truly are the masters of account security!