Hacked Account

[Bert6583]

Today i recived an e-mail from cryptic "As a result of routine security checks and upgrades, we have discovered that certain of your account information, including your password, may have been accessed by an unauthorized party. For your security, we've reset the password on your account. You can recover your password via the "forgot password" link on the official Star Trek Online or Champions Online web sites"

I have attemped to recover my password and have not recived any e-mails. My question is do I have to create a new account to start a ticket or is there a number to call (that i can not seem to find) to fix the situation?

[CAPT Huckabee]

Same thing happened to me today buddy. I got my email sent to me, and reset my password without a problem though.

[Bert6583]

I'm not sure what it is, I typed my e-mail and waited an hour nothing then been trying for the past 30 mins with nothing just not sure what to do at this point

[Morgan Shackelford]

https://support.perfectworld.com/app/answers/detail/a_id/4124

Q:
I reset my password but I still can't login. What now?

A:
Please submit a ticket from this page:

https://support.perfectworld.com/app/cs_cryptic/iss/log

[VADM pRett]

I was having difficulty, too; make sure you are not logged in to your account when you go to the https://www.startrekonline.com/user/password link.

[Bert6583]

Ok thanks, but just as I was about to go, i get 4 e-mails pop right in, might have been an issue with g-mail not to sure but thanks

[xivim]

Heres the funny part. They state they reset your password. I was able to log into my account just fine. Hmm, my password was not reset. Seems fishy. Looking into the email, i noticed the Link does not go to where it said it does. Goes to some weird URL.

Im not 100% on this, but i am not trusting that email. I will be going to the website itself, and changing my password there. I Never follow a link in an email telling me i need to change my password.

Might be 100% legit, not sure. I just prefer to play it safe.

[VADM Kor]

That's what I did last night too, just in case. Went to the startrekonline.com site and logged onto it then did the password change without going to the link. I suggest that anyone that went to the link received in e-mail should do the same. I didn't look at it closely, and it looked legit, but it might have been a really slick spoof/phishing e-mail I suppose.

Anybody who went to the link in the original e-mail and entered the "new" password on a page to try and change it, and who wasn't able to change their password until they did it somewhere else, should probably log onto the Cryptic or Perfect World site, and change it to something else again, just to make sure their current password isn't entered into some hacker's evil database.

[Anton Mercer]

I went to the website directly and asked for a reset email off the same site and received he email. It looks almost the same in every way... but on the reset email from the log in down at the bottom is says Cryptic studios is copyrighted in 2011 ..... on that cryptic email... its copyrighted in 2012..... kinda fishy unless they had to re-copyright after being bought by PW

[Dr. Collin McGee]

i was hit too. it must be true, because Cryptic reset my password. to be safe, i initated my password change by going to the STO site and using the "Forget Your Password" link and received a new email from Cryptic. after following the steps, everything seems to work fine.
here's the funny part, this breach, according to their information page happened in 2010. i think we would have noticed and be long passed any suspicious behavior with our finances.

warp speed and see you out there.

[VADM JT Kerry]

I had no problems making the change in password. I also changed my e-mail and credit card info. But, I did this through the website - Forgot password link - and so on. In dealing with Paypal and eBay, you learn quickly never to use the links in the e-mails. One thing you can do to test the links, to turn on the Status Bar (in IE - View - Toolbars - Status Bar). The you can hover over the link with your mouse and see where you will bee directed. If the link doesn't look legit, don't go there.

And if you have the time and ability to copy the links or zip the e-mail, I suggest sending the info to Cryptic and Perfect World. Their legal departments my be able to take some action, and, if not, their IT Staff should be able to find a way to have the sites blacklisted. Most decent AV products use the blacklist table to at least warn you of the dangers of certain websites, if not just outright block you. My Kaspersky I setup with high heuristics, so if my 12 year old decides to get on my PC and go to the wrong site (at least one on their blacklist) it won't let her.

JT