Tue, Oct 18, 2011 | 11:50 BST

Microsoft denies XBL compromise despite outside account access

Microsoft has denied that Xbox Live has been compromised, although admitted that there’s been outside access to “a limited number” of accounts.

Reports from all over the shop, including GAF and Reddit, indicate that hackers have gained access to their profiles and bought Microsoft Points, as well as FIFA 11 or 12 appearing on their gamercards.

Microsoft is currently sorting out the situation, but says the service as a whole hasn’t been compromised.

“We do not have any evidence the Xbox LIVE service has been compromised. We take the security of our service seriously and work on an ongoing basis to improve it against evolving threats,” said an MS statement to Ars.

“However, a limited number of members have contacted us regarding unauthorized access to their accounts by outside individuals. We are working with our impacted members directly to resolve any unauthorized changes to their accounts.

“As always, we highly recommend our members follow the Xbox LIVE Account Security guidance provided at www.xbox.com/security to protect your account.”

13 comments

#1

Freek
18/10/11, 11:53 am

In order words, a few people used easely geuse-able passwords.

#2

Tech-N9ne
18/10/11, 12:04 pm

Your Xbox live account could be also your MSN account, Zune account and a whole bunch of other MS services. This is how mine is setup, and I believe alot of other people. If one is breached, all is breached.

MSN messenger is one of the main sources of these hacks, with people using all sort of IM clients all signing in with their Live Id username and password, the same as their Xbox live account, if they have one. These sort of hacks are unavoidable for careless people.

This is different from someone or some group hacking into Microsoft servers and stealing user details like happened with the PSN hack.

#3

freedoms_stain
18/10/11, 12:33 pm

Compare this headline to where the exact same thing happened on PSN last week, where’s the scare mongering this time?

#4

OrbitMonkey
18/10/11, 12:50 pm

@3 C’mon man, you know that LIVE is unhackabubble!!

#5

Clupula
18/10/11, 2:00 pm

@3 – that’s different! Sony don’t pay as much advertising money to websites as Microsoft do.

#6

Psychotext
18/10/11, 2:29 pm

Related, it’s funny just how many security questions are easily answered by five minutes on someone’s facebook page.

/thumbs up

#7

DUFFKING
18/10/11, 2:42 pm

@3

Because as the headline says, it’s because Live hasn’t actually been completely compromised. It seems to be people using social engineering to get passwords to EA accounts, which are then presumably the same email + password used on the live account. As opposed to there being a huge security hole allowing people to download everyone’s card details.

#8

Gama_888
18/10/11, 2:46 pm

@3 yaknow i thought the exact same thing when i read this thread and its comments.

One way or another the service has in some way been compromised, and yet everyone jumps to M$’s defense?? wtf?

Admittedly this is a much minor thing than what happened to Sony, but if it were to happen to M$ in the same way, then i hope no-one would be defending them, considering your paying for that service aswell.

#9

freedoms_stain
18/10/11, 2:49 pm

@7, I said last week, not months ago, I’m referring to this: http://www.vg247.com/2011/10/12/93000-accounts-compromised-in-psn-attack/

Compare the headlines.

And the “attacks” have near identical rings, except in one case the issue came to light because Sony announced it and the other came to light because people publicly complained, yet the more honest account is the one with the more negative implications.

#10

Joe Musashi
18/10/11, 2:52 pm

@7 The incident last week was not the same as the one earlier in the year. It was entirely different but the headlines would make the casual reader believe they’re the same thing. #3′s statement is actually correct. I think you’ve just given a good example of how people’s understanding of events can be manipulated by headlines designed to startle rather than inform.

(Not to mention the huge factual inaccuracy of your “allowing people to download everyone’s card details” statement. That’s not what happened at all. If you believe it is then you’ve been incorrectly informed.)

JM

#11

neon6
18/10/11, 3:30 pm

noone is safe

#12

DUFFKING
18/10/11, 6:18 pm

@9

Sorry, didn’t read your post properly.

#13

flomoloko
24/10/11, 8:42 pm

This isn’t about bad passwords or social engineering. This is some type of system exploit originating out of China. It happened to me, and I am very good about security and not falling for any BS. If you have an XBOX Live gold account with a credit card attached, you better watch out.

Leave a Reply