Account Breach incident

Jesus christ what a jerk that guy is. Anyways, glad the team will be taking pre-cautions to help further prevent this in the future. I'd say maybe have the possibility of an email notifying you of a login from another device, but I don't know how hard that is to code, or the possibility of it. (With maybe a back-up email option if you don't have an access to the email on you're account.)

how do u know if you have been affected by it?

If you've ever been pnwed you can *never* use the breached password again. It becomes effectively as weak as using "password". I've had that happen a couple of my old passwords before I switched to a password manager, and they would have got my Steam account if it wasn't for Steam Guard... that was my "wake up call" to get serious about unique passwords. (Sorry if this sounds harsh, I just want to emphasize that this is serious because next time it could be more than a collectibles game) On another note, I'm also a little confused about having to make an auth app? Most of my 2FA gives you the seed code that you put in to an authenticator of your choice. If you do add 2FA can you make it like that so I can put it with my other codes? Though I don't envy your staff the "I lost my phone" 2FA reset tickets...

I was indeed wrong about this. It used to be true, I think. Or maybe I've always been wrong. I don't know. But that's why I'm looking into it. Anyway, meanwhile... The VIP list now shows offline times again, but only up to a week. Beyond that it's just ">7d".

Thank you very much! It's much much appreciated♥♥♥

I was just about to say, that's the whole reason I put people into my VIP lists to see when they're on and when to excpect responses. And also for raffle purposes but now that it caps out at 7d works too, thanks.

I was a victim of this sort of thing that May. I was gone for a bit and then one morning I found my account locked. Whoever this jerk is used another person's account to take my albinos and rare shinies from my Not For Trade fields for themselves, even giving them nicknames when I never did. (Especially since said fields were messed up when I checked after my account was unlocked.) I hope this person gets jail time! Those Pokemon they stole were not easy to get!

My account was affected in March. When I first got on after this person used it, I saw they had been taking melans and stuff and using my account as sort of a holding place while they stole from others. I notified staff that it was likely not just me being affected, and my account was unlocked in April. My question is, why hadn’t this announcement come sooner? I get people are busy, but this is pretty significant stuff.

This announcement is not actually about your specific situation. As Garthic said earlier, there have been multiple instances where this or something similar has occurred. Edit: This post was also made at the time by Niet.

Hmm, got it. Every step to prevent such behavior is important.