I’m sad

My Account was Compromised

So I have already sent Evony a message so I will start a topic for reporting a problem so that everyone knows what has happened... I got a phone call today from my host asking if I restarted my account on 128.. I said no I wasn't on a computer last night I was no where near one. There was only two people with my info and I have know them over a year.. Long story short my account was hacked and restarted!! I have spent over a year on my account on 128 (JLG) and I get hacked and restarted. I lost over 40 billion in res and 30 lvl 10 hero's and some really high leveled hero's.. What is Evony going to do to fix this BS.... My account was in holiday for a month it was pulled out of holiday Saturday night and was restarted sometime Saturday night or early Sunday morning. I know the rules and it is legal to have a account sitter which I contacted Evony a long time ago stating that I had one and gave them the two names. Now I would also like to point out that my account had a security pass code and I was the only one with it. I was no where around a computer for 18+ hours it was a holiday man. I got a text message on my way home asking If I restarted my account which why in the hell would I do that I spent a LOT of time on my account. So what is Evony going to do to keep this kind of things from happening. Which seems to be happening a LOT on 128....... I can name at least 3 accounts now and 2 with in the last 2 months of this happening.. Now this is a Question for Evony CS. How and what can you do differently to keep this from happening...

So I will post again and reword it differently... So
1 person has
this question
+1
Reply
  • This reply was removed on 2011-03-28.
    see the change log
  • Yikes - that's sad. I hope you get it resolved. It's the second time I've heard of an account in Holiday go pffffth. Course peeps usually blame the owner but I'd like to know what is happening myself. Just curious.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • Well I am the owner of the JLG account and it was pulled out and poof gone it shows in Events someone giving up my role in my alliances and then my account is gone the next, I log it to find that it was zeroed and everything thing gone, I thought that someone took a few cities but no they didn't do that because the spots where my cities were which were really nice 10 fields well open flats.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • Yeah they wouldn't take cities cause that would be too obvious. Interesting would be to see if the rezzies went somewhere else or went poof as well. Same with heros.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • 4
    So you knowingly gave your information out to multiple other people, and you are surprised that something happened to your account?
    We do not support this and as is stated in our rules.

    "There is no compensation for damage done by someone logging onto your account, no matter how they got your password, so keep it safe!"


    This intrusion on your account is not because of anything that Evony did or did not do. You willingly distributed your account info and apparently did not set a security code.

    Irregardless of this you are allowed to have 1 account sitter and you need to notify us, you did not notify us and you had 2 people watching it.

    Look at it like this you go on vacation and ask someone you know on the internet to watch your house, and you come home and stuff is missing, then you blame the police for not watching your house. What will the police say to you?

    We have given you tools ie the security code to protect your account. Additionally an account has never been compromised because of a lack of security on Evony. Evony, the servers and websites are secure, generally compromised accounts are 99% of the time already shared with other people, or accounts are compromised by the download of third party "tools" ie hacks that steal your account info. In our research almost all of the cheat tools that you can DL over the internet call home with your account info. I am not saying that this is how you are compromised just the facts.

    All of that being said submit a CS ticket and we can try to help you, but do not blame us for your own actions. I am not being mean, this is the way that it is. Issues like this are the exact reason why we do not support sharing of account info.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • Thantium, I did what the rules said to contact CS no one had my security code to restart my account other than me.. I did notify you guys in June 2010 before I started to do some military training that required me being for a period of time. My host and another person I have been in contact with for over a year on this game and talk to them all the time in game and via facebook
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • Way to go Thantium in providing a beautiful example of a "Parental" transactional analysis example. ::rolls eyes:: JLG responded above with what I would point out as an interested Evony Product Consumer. I also have used the supposed Security Code, although I don't put my account in Holiday I'd like a better answer than the typical - It's all your fault.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m frustrated
    Thantium I am in phone contact with my host we are actually good friends from this game and we do talk a lot on the phone with each other. You are beating around the bush yet again Mr. Thantium I had a security code and I am on a computer at home on my own wireless that needs a pass code to get onto it. Now my question is how did they get my Security Code!! And I would like to restate that only 2 people 2 people have my info that is it. that is what I am getting at I have theirs as well. Hacking has became a problem on Server 128. A lot of people will verify this with me. SO I WOULD LIKE TO STRESS NOW THAT THE 2 PEOPLE HAD MY INFO WOULD NOT RESTART MY ACCOUNT BECAUSE IN ORDER TO THEY NEED MY SECURITY CODE AND I AM THE ONLY ONE WITH THAT INFORMATION....
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • @Thantium, as a CS rep you know the company is going to be blamed by someone for everything at some time or another so your question is really a moot point.

    However since JLG did use the approved account-sitting method AND he kept the security code private - well, people are going to be curious.

    From my understanding even if he shared his keys, the security code should have stopped the account from being reset.

    The more people spend on this game (and I've heard of boat loads of cash from some) people are going to be super emotional when it comes to account security.

    I only have one city but if I came back to find the account reset even I'd be upset to lose my paltry level 400 hero.

    @JLG I read some of your (now) edited responses via my email and dude - that's no way to talk to anyone, even if you are upset with them. Seriously . . .
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • 2 people have information neithert deleted the account therefore its events problem. There is an expectancy.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m frustrated
    @Amikee you are right that is no way to talk to someone but they should not be able to change things with out giving the reason like the title of my posting it has been changed twice now, and when Thantium changed it to HELP!! My account was Compromised, it set me off. And since my questions are still not be answered I still want to know what they are going to do to better assure that account's can't be hacked. I might not have spent a lot of money on my account but 1,000 dollars in a little over a year is a lot of money to me, being a single parent and going to school full time. I lost a lot of good hero's. my highest being a 692 attack I believe, but its not the hero's that I am mainly concerned about since I lose hero's a lot on scout missions and reinforcing people.. But still I think I am in titled to find out what they can do to fix this problem!! Steve your funny man..
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m just stating the facts.
    The security code can be removed over a period of 72 hrs.

    The person would simply have to log in, take you off holiday, and then wait 72 hrs until the code was removed, and then reset your account.

    The way to prevent this would have been to change your password when the people no longer needed to sit your account. If you were going on Holiday anyway, there was no reason for them to have your password, and as such, you left yourself open to being taken advantage of.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m frustrated
    My account was taking out of holiday Saturday night and restarted Sunday morning... So if my math is correct that doesn't equal 72 hours... Next...
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • "The security code can be removed over a period of 72 hrs"

    Well this is new to me - so what good is the security code then?

    And he was in Holiday so why? - oh what the heck let's just agree playing Evony at all is risky and everyone allows themselves to be taken advantage of if you put it that way.

    Still would be nice to have some confirmation if this was how it was done.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I agree Amikee hell with it you all just play evony if I don't get my account back I am done forever no more logging or anything!!
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m wondering.
    Thantium, (Official Rep), commented 38 minutes ago
    New to everyone??? What are you talking about? How can you reset the security code over 72 hours?

    JLG commented 10 minutes ago
    Well at least I am not the only one confused here. I know you can take a security code off

    If you forget your security code, you can opt to take the security code off, during which those 72 hrs, you cannot perform any actions that are protected by the security code. I'm surprised you wouldn't know, Thantium. Unless that has been changed? It was that way when the security code feature first appeared, and in fact, says it right now:



    If they did not do this, then I am baffled. A security code only really protects you if you log in regularly, and would notice the little icon in the upper left corner of the screen which counts down the time til 72 hrs is up. That's why if you plan on going on Holiday, you are not protected if someone has your login. They can take you off Holiday and then take off your code, while you think you are safely Holidayed.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • My code was still one because I had to put it in to give away a city.. I know how to play this game. My security code was still in place. Also you can abort the process of the security code try it on your account...
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m concerned
    1
    I've heard of this happening on my server too. I have no way of knowing if the person it happened to had shared account information, but i would like to suggest that any player concerned about this use a strong password to protect their account. A password that contains a mix of upper- and lower-case letters, plus numbers, is much harder for someone to "hack" than one that contains a simple word that is found in the dictionary.

    I would suggest to Evony that if a person enters the wrong password or security code 3 times in a row, then the account-holder should be notified via e-mail and the operation should be timed-out for a period of time to thwart brute-force attacks on the account.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • 1
    1. Many people use the same passwords on everything.
    2. Passwords are sometimes easy to guess
    3. Passwords can be tricked out of people. For example, "friend" makes a cool website or forum. They ask you to sign up. You do. Your password info is now in their system stored in clear text. They get it and login to your Evony.
    4. Brute force attacks can be done on other things that player accesses, for example, other websites or tools. If player uses same password on stuff, easy.
    5. Assume that if you give your password out to ONE person, then everyone knows it. People talk.
    6. If a player does not want to lose their investment in Evony, then they need to do 2 things... game on Age II servers Na1-19 and never ever ever give passwords to ANYONE, not even for "account sitting" (which we all know players use as an excuse to account share). Account sitting should be against the rules.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m sad
    the same thing just happend 2 me i got hacked 2 and i just asked evony
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • I’m FURIOUS
    well this isn't as extreme but it seems that 2 days ago (Saturday 10 September) my account was no longer reachable...i don't know how and i have contacted evony twice with no reply. I cannot get into the email account because of restrictions i had set and don't have access to any more, all i want is an email explaining my situation, im starting to believe ive been banned which is preposterous as i've never use third party software and know of those who do yet i get hauled for it, thantium, get those guys who do the banning to sort their selves out because they're banning the wrong people. if that's not the problem then i need an emaiI to my address so i can continue playing
    • view 11 more comments
    • Still don't see a rule that says how many members of a particular household may have accounts on the same server. Per the rules, they may not share accounts, of course, but if a large family all wants to play together, is there a specific, defined rule that says only so many of them may play if they access the net from a shared internet connection?
    • Its something that has changed in recent times considering they were originally banning accounts who had the same IP adress. None the less Evony gave way to the Numbers. Sort of hard to actually fairly prove but Alt and Multi accounting is happening like a ramped bad habbit. Eather the accounts were created by the to serve as Colonies, Troop and Resources machines. Also considerd how people are giving accounts up for sale as alts as well as saling HC's and HH's in various ways. Not saying who but I know it happens. But I dont recall if they set a limit on the number. The actuall number of accounts from a single IP adress but set some limits. As like manny other preventive steps punish honest players as much if not more so than the people who own Multi accounts or have Alt accounts. Ambushing resources heading to a player with a greater ammount of Prestige which irks me off. I dont have an alt account but I cant send resources to some players who have a greater prestige or risk getting ambushed.

      I think a serious review could prevent a drastic amount of alts but never catch them all. Also sending E-Mail on a random bases to reply back with not just signing on might catch several if not all of accounts sold or given away over time since most likely none hace access to the E-Mail account used for the Evony account to respond to.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • Hello , I had an account given to me from a alliance member that quit . after having this account for over a year and building up millions of troops an rank some one stole the account . I had changed the password and security code !With no way for me to retrieve the password through email I have lost this account forever :(
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated

  • i also got a new account from an alliance member and 3 days later it was hacked..i already mailed evony account administration with no reply yet...what do i do to get it back?
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited sad, anxious, confused, frustrated