It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
First of - I got my account back now.

As I read through the Internet it seems as it happens to quite a lot People.

Why not prevend it a Little more with the following Change in the CMS

When u want to Change ur eMail adress - send an eMail to the original eMail adress to confirm the Change or click no it wasn't me who did this Change.

since it's common in so many Systems it should be easy to implement.

edit:
it seems that the guy who stole my account is still logged in on this account since he changes the back Country to russia and the Age also changes.
Post edited June 09, 2015 by zanetheone
No posts in this topic were marked as the solution yet. If you can help, add your reply
avatar
zanetheone: As I read through the Internet it seems as it happens to quite a lot People.
Well, to be exact, we witnessed a few of those case here since The Witcher 3 release and never before in my experience.
You are right about the two steps verification, it's a better system. But don't worry, you are not the first to make that remark.
Ok thank you for your answer.

Was there ever an answer why they not implement that "two steps verification" System?
high rated
Hi!

First off, I'd like to apologise to all who have experienced account hacking on our site over the past couple of days. We're hard at work to make this less of an issue and less likely to happen - but I understand how frustrating it must be to lose access to your games.

Having said that, there's a new measure that will help us pick up on hacked accounts more easily.

If your account e-mail changes, you will get an automated message.

It that looks like this and has the new e-mail address, the old one, the IP currently in use (together with estimated location), and the OS and browser of the current user.

If you get such a message and it wasn't you who changed the email address, contact us.

Use the link at the end of the message ("contact our support team") to let us know it happened. You'll be redirected to our contact form - here's an example of how to fill that in.

We do our best to get back to hacked account emails as soon as possible, and to change the e-mail addresses as quickly as we can and restore the fully functional accounts to their rightful users.

IMPORTANT:

1) When contacting us regarding a hacked account, you must replace the e-mail address with one you have access to - otherwise, our reply will end up at the hacker's e-mail address, which you have no control over or access to.

2) Please do not send multiple requests to support - if you do, your request is pushed to the back of the queue again. If you feel the need to add more details to your support request without getting bumped back, you can do so by replying to the automated support reply you will get with your Ticket ID.

3) As soon as you get access to your account back, please change your password. It may be a simple thing, but please don't forget. It will mean the hacker once more lost access to your account for sure.
So many hacked accounts.. how is it possible?
Wait, they haven't used cracked Witcher3 games, right? XD
avatar
phaolo: So many hacked accounts.. how is it possible?
Wait, they haven't used cracked Witcher3 games, right? XD
User stupidity
avatar
phaolo: So many hacked accounts.. how is it possible?
Wait, they haven't used cracked Witcher3 games, right? XD
TW3 is DRM-free, so what is there to be cracked? It practically comes pre-cracked by default straight from the developer...
avatar
phaolo: So many hacked accounts.. how is it possible?
Wait, they haven't used cracked Witcher3 games, right? XD
Most likely scenario? Stolen login info on another site and identical login info on GOG.
Post edited June 18, 2015 by Randalator
avatar
phaolo: So many hacked accounts.. how is it possible?
Wait, they haven't used cracked Witcher3 games, right? XD
avatar
Randalator: TW3 is DRM-free, so what is there to be cracked? It practically comes pre-cracked by default straight from the developer...
Well.. doesn't it still need to be downloaded from somewhere?
Maybe the source wasn't legit.
Also, doesn't it need a key code?
Post edited June 18, 2015 by phaolo
avatar
Randalator: TW3 is DRM-free, so what is there to be cracked? It practically comes pre-cracked by default straight from the developer...
avatar
phaolo: Well.. doesn't it still need to be downloaded from somewhere?
Maybe the source wasn't legit.
Also, doesn't it need a key code?
No code, no. Well, yes, if you want to download the add-ons and extras from GOG, but just like the game itself, those are probably available through shady places. Also it isn't a game key as such, it's a GOG gift/promo key to activate the game on your account, and there is no reason to do that.
avatar
phaolo: So many hacked accounts.. how is it possible?
Wait, they haven't used cracked Witcher3 games, right? XD
1. PC with malware.
2. "GOG Galaxy" downloaded from another site than GOG.com. Someone recently posted a link to a page on malwarebytes.org warning for fake clients with malware.
3. Same combination of password, e-mail and username as on other sites/forums. Either 1 or more of those got hacked or the people behind it abuse account info.
avatar
HertogJan: 1. PC with malware.
2. "GOG Galaxy" downloaded from another site than GOG.com. Someone recently posted a link to a page on malwarebytes.org warning for fake clients with malware.
3. Same combination of password, e-mail and username as on other sites/forums. Either 1 or more of those got hacked or the people behind it abuse account info.
I wish that someone could confirm those options.
One of the "victims" said that he didn't use Galaxy and that his password was unique.
avatar
phaolo: ...
did this happen to a known forum user or only to new gog accounts?
avatar
apehater: did this happen to a known forum user or only to new gog accounts?
I don't remember and I can't find it again, sorry.
avatar
apehater: did this happen to a known forum user or only to new gog accounts?
avatar
phaolo: I don't remember and I can't find it again, sorry.
i can't remember too, that a known forum user account was hacked. that only new accounts are hacked is suspicious and reminds me of the "witcher removed from account" threads one month ago.
avatar
phaolo: I wish that someone could confirm those options.
One of the "victims" said that he didn't use Galaxy and that his password was unique.
Perhaps an easy to guess password based upon available information from social media sites.
A hacked e-mail account is also possible. It seems all you need for a password reset is to enter an e-mail address. With a hacked account you can reset the password, login and change the account settings. I assume GOG looked at the history of the hacked accounts and would have noticed something like this.

avatar
apehater: did this happen to a known forum user or only to new gog accounts?
Highest rep I've seen on those posting on the forum about it, was 8. I might have missed some of the threads though.
Post edited June 18, 2015 by HertogJan