Password Reset..

..right.. I know there will be those of you who will maintain it's impossible.. it must have been my own fault etc...

BUT
I logged into one of my e-mail accounts to find a 'Password Reset' message when I haven't reset the account..

The ip address used was :
114.207.246.45

So I've been on to NCSOFT as my main PlayNC account is also locked out - I'm getting information via e-mail but they're asking for info such as d/o/b - the address I registered the account in etc.. the last 4 digits of the card I used to register the account..

The thing that bothers me is that this is all via e-mail - totally unsecured.. inputting the data on their website is no better as it's no encrypted..

Is this normal practice when trying to resolve a security breach?

Also - I'm having problems finding some of my original info (I've had the account for approx. 4 years) as I've had at least 2 new PCs in that time.. I accept this is my own fault and I accept that NCSoft MAY refuse to grant me access to my OWN account (which is something I'll have to accept).. (it's the Game Account Activated mails which I suspect were on one of the machines I replaced - doh!!)

But my main concern is that I've used my credit/debit card to make purchases using my account - as someone else (Korean?) has now taken over my account - I'm concerned that my bank accounts have been compromised - is this possible with them accessing my account?

Oh - and for all those who'll say this is my own fault - I have an IT background and am extremely careful with passwords etc.. I hadn't even played the game for several months (sorry - my PS3 has taken over!) - so to get the password reset message on a day when I hadn't even used the game was a REAL shock!

1. Yes, it is normal to input the info in the website ticket or via email to Support.

2. Just supply as much info as possible, including character names, creation dates, campaigns finished, etc. Any little details that would indicate you own the account.

3. To the best of my knowledge, we have never had a report of anyone having the credit card info accessed when their account has been hacked.

4. No, it's not always the account owner's fault. As usual, prevention methods are reactive and never catch up to the hacker abilities. You can only take what steps are available.

Anet doesnt store credit card details on their website and you cant "lock" a credit card to your account so the chaqnces of someone gaining your card details via anet/ncsoft is very very rare so in that area your safe.Each time you buy from the store you have to enter fully your details - so if you over time made 4 seperate purchases you had to input 4 times the same card details.

Phew! It's something of a relief about the card details - they're my main concern at the moment.. I don't want to lose all my accounts/characters etc... but they're really secondary in all this.. unfortunately I've just recovered the HDD I used when I originally registered and it looks like I haven't kept all the early e-mails - damn you housekeeping!!!

OK.. I'm now reset.. new passwords etc.. created and back in game.. and what a surprise.. they've cleared me out!! I'm awaiting a response from NCSoft as to how my secure password was breached and whether any items can be 'recovered'.. I'm not expecting too much of a positive result here..

They can only recover items that:

1. haven't been merched
2. are still on the first person to receive them.

They have no way to recreate items or to trace them through multiple transfers.