My account was hacked (having OX and lots of teras on it)

[Blurry]

I have this account since 2015 and today it got hacked. The new email is a random "1b81********@firemailbox.club".
I have many infos to confirm the ownership of my account, as it has an OX and a decent amount of valuable items.
I need some help from a GM, please.

Tamer: Tainoo
Server: Lucemon

[AnnaUnni]

Is there a hack wave coming, or what? Anyway, was your credentials leak anywhere?

You can skip a ticket response from the staffs by going straight to the verification process.

These are the 3 information that they will need to verify in order to recover your account when you are submitting your ticket.
1. Account info.
- Log-in ID:
- E-mail address registered with Log-in ID:
(Some players are confuse with this step because English isn't their main language. It's the email you use to create your account with.)

2. In-game info. (*include information of your 3 Digimons.)
- Server:
- Tamer's name:
- Tamer's level:
- Possessed Digimon name, type, level:
- Possessed Digimon name, type, level:
- Possessed Digimon name, type, level:

Ex.: September (name), Salamon (type), 99 (level)

3. Year of account creation:

4. New email you would like to use.

Best of luck!~

-Anna

[Blurry]

Originally posted by AnnaUnni:

Is there a hack wave coming, or what? Anyway, was your credentials leak anywhere?

You can skip a ticket response from the staffs by going straight to the verification process.

These are the 3 information that they will need to verify in order to recover your account when you are submitting your ticket.
1. Account info.
- Log-in ID:
- E-mail address registered with Log-in ID:
(Some players are confuse with this step because English isn't their main language. It's the email you use to create your account with.)

2. In-game info. (*include information of your 3 Digimons.)
- Server:
- Tamer's name:
- Tamer's level:
- Possessed Digimon name, type, level:
- Possessed Digimon name, type, level:
- Possessed Digimon name, type, level:

Ex.: September (name), Salamon (type), 99 (level)

3. Year of account creation:

4. New email you would like to use.

Best of luck!~

-Anna

The only thing I know is that the hackers only need the log-in ID to change the email exploiting a flaw on GK's site, so I never trusted anyone enough to tell them that information.
Now it's only speculation, but I believe they get those IDs from GameKing's database somehow.

But thank you very much! I'll send them a ticket containing those infos hoping that anything will be done.

[Blurry]

The support team answered me, but they couldn't help me. They said I provided wrong information about my own account, which just can't be right. I know exactly what I have in that account, the old email, the old password, the PIN, how many Teras I had in inventory, what's in my warehouse, digimon names and levels, etc.

Here's the statement:

"Hello. Tamer!

This is the support team of Digimon Masters Online.
Thank you for providing precious information of your account.
However, some of the account information you have input is incorrect, so we could not proceed further.
As the account linked e-mail is an important security matter, every subjects must exactly match.
We may not help you further with e-mail change unless every single subject you send us are proven.

Digimon Masters Online Support team will always stand by to help you with best effort.

Thank you.
Best Regards,"

If any GM reads this, please, help me out. I wanna know what information I should give, and I ask for a double check.

Thank you.

[AnnaUnni]

Unfortunately, those are the 3 information that they will need to verify if you are really the owner of the account. You’ll just have to send another ticket providing the correct information. I was able to retrieve my account the 2nd time.

[Blurry]

Update: The support team answered me again (I'm actually surprised), and here's the full statement:

"Hello. Tamer!

This is the support team of Digimon Masters Online.
Thank you for providing precious information of your account.
However, possessed Digimons' name that you've input except Jevil is incorrect, so we could not proceed further.
Maybe the hacker might changed the name of them, so how about sending us ticket about 2 other Digimons(at least) that you have, that you haven't input in previous tickets?

Digimon Masters Online Support team will always stand by to help you with best effort.

Thank you.
Best Regards,"

So, it seems that the hacker changed the name of my digimons, except my Commandramon. I've already sent another ticket providing more names. Hopefully I can get my account back.

The only thing that makes me feel anxious right now is the fact the hacker discovered my PIN and probably stole all my valuable items and deleted important digimons. If that's the case, I'll try to contact GameKing and see what can be done.

[AnnaUnni]

Originally posted by Blurry:

So, it seems that the hacker changed the name of my digimons, except my Commandramon. I've already sent another ticket providing more names. Hopefully I can get my account back.

I typed 10-15 of my Digimon's name when I submitted my ticket. Lel!~

Originally posted by Blurry:

The only thing that makes me feel anxious right now is the fact the hacker discovered my PIN and probably stole all my valuable items and deleted important digimons. If that's the case, I'll try to contact GameKing and see what can be done.

^This. DMO needs something secure like security questions etc. If they're able to hack you by logging into the GK site then changing the secondary password/PIN isn't a problem. I do change emails monthly on the account that I bought, and it still got hack by an unknown person using an email generator from yopmail.

[Blurry]

Originally posted by AnnaUnni:

^This. DMO needs something secure like security questions etc. If they're able to hack you by logging into the GK site then changing the secondary password/PIN isn't a problem. I do change emails monthly on the account that I bought, and it still got hack by an unknown person using an email generator from yopmail.

Another update: GK changed my email so I could recover my account.
And, yeah, I just noticed how ridiculously easy is to reset the secondary password, and with no surprise my items are now gone.

I just sent another ticket asking for my items back, as it worked for some people before.

Originally posted by AnnaUnni:

DMO needs something secure like security questions etc.

You're absolutely right, Anna. They need to update this security issue asap. Security question is a great idea, or even a single given security code, like Valve do with Steam Guard, would work.

But taking in consideration how long this problem is a thing, I wonder why they haven't improved it yet. The feeling that I have is that they don't do it on purpose.

[AnnaUnni]

Originally posted by Blurry:

Another update: GK changed my email so I could recover my account.
And, yeah, I just noticed how ridiculously easy is to reset the secondary password, and with no surprise my items are now gone.

Great to hear! If you are going to continue to play the account then by all means is that please do not upload any more money. I would say start anew, and transfer every item that you can to your new account if you are going to be continuing play DMO.

Originally posted by Blurry:

I just sent another ticket asking for my items back, as it worked for some people before.

I don't know if this is possible, but good luck!~

Originally posted by Blurry:

You're absolutely right, Anna. They need to update this security issue asap. Security question is a great idea, or even a single given security code, like Valve do with Steam Guard, would work.

But taking in consideration how long this problem is a thing, I wonder why they haven't improved it yet. The feeling that I have is that they don't do it on purpose.

It's an old game I guess so no one cares anymore.

[Charles]

maybe gk hacked you not some random person

[Blurry]

GK asked me to send a list informing what item was stolen, but it's been 1 week without response. Still waiting.
If any GM reads this, please give me a light.

[AnnaUnni]

Originally posted by ERIC.TuskKing:

maybe gk hacked you not some random person

As long as the hacker knows your credentials, and answer them correctly then the staff will give a new email reset of their choice to them.

Originally posted by Blurry:

GK asked me to send a list informing what item was stolen, but it's been 1 week without response. Still waiting.
If any GM reads this, please give me a light.

Best of luck!~

[Blurry]

Originally posted by 빛Mello:

I think the developer has something to do with the hacker of this game
because he didn't want to roll back the item
He changed your email as if your account was hacked even though it was his doing

Considering how weird this company works, I wouldn't doubt that.