Post Reply Premium Account Hacked/Password and Email Address changed.
Posted 8/3/15 , edited 8/3/15
My account has been hacked and had its email address and password changed. This is the actual account and now I can't change the email back because I don't know what the new password is.

My Facebook account is still linked with my account, so that's how I'm still able to log in. I have contacted support and am still awaiting a response.

I'm not sure where the hacker would have got my password from as its a unique password for Crunchyroll and I have not been hacked anywhere else.

It would have been helpful if my email address was notified when an email address change was requested, so that I could have said that I did not approve the change.

I'm pretty sure that this isn't even supposed to be my username, but I didn't think that they could be changed.

My viewing history (before 31st July) and payment details are still on the account, so that's how I'm sure that it is still my account.

Can a Mod/Admin change this back and possibly look into this issue as I have now been without the Crunchyroll service for a few days now and cannot watch on any of my other devices as they all ask me to log back in.
4138 cr points
Send Message: Send PM GB Post
19 / M / Colorado
Offline
Posted 8/3/15
That's shitty
Der Zoodirektor
23407 cr points
Send Message: Send PM GB Post
34 / M / Germany
Online
Posted 8/4/15

gelinho12 wrote:

My account has been hacked and had its email address and password changed. This is the actual account and now I can't change the email back because I don't know what the new password is.

My Facebook account is still linked with my account, so that's how I'm still able to log in. I have contacted support and am still awaiting a response.

I'm not sure where the hacker would have got my password from as its a unique password for Crunchyroll and I have not been hacked anywhere else.

It would have been helpful if my email address was notified when an email address change was requested, so that I could have said that I did not approve the change.

I'm pretty sure that this isn't even supposed to be my username, but I didn't think that they could be changed.

My viewing history (before 31st July) and payment details are still on the account, so that's how I'm sure that it is still my account.

Can a Mod/Admin change this back and possibly look into this issue as I have now been without the Crunchyroll service for a few days now and cannot watch on any of my other devices as they all ask me to log back in.


It looks like you fell victim to weak password management.
You probably used the same password across several sites, one of which was hacked and had its user data leaked onto the internet.

I've reverted the email change and changed the password.
Please go through the password reset procedure and set a new unique password. Do the same on any other website you have been using with the same credentials.

Also run a virus scan on all of your devices to make sure that it was not a local issue.
Furthermore check the devices page in the settings for any devices you do not recognize and remove those.

Your payment details are safe, as we are not showing the full details to anyone - not even the owner of the account.
The Wise Wizard
100935 cr points
Send Message: Send PM GB Post
56 / M / U.S.A. (mid-south)
Online
Posted 8/4/15

shinryou wrote:

It looks like you fell victim to weak password management.
You probably used the same password across several sites, one of which was hacked and had its user data leaked onto the internet.

I realize you are using a standard template for your reply, but...

gelinho12 wrote:

I'm not sure where the hacker would have got my password from as its a unique password for Crunchyroll and I have not been hacked anywhere else.

Are there any plans for CR to institute better security for e-mail changes, such as e-mailing the old e-mail address when a password change is made, and preferably sending a reversion link to that address?


Der Zoodirektor
23407 cr points
Send Message: Send PM GB Post
34 / M / Germany
Online
Posted 8/4/15
That's why I ask everyone to scan their devices for viruses as well. In his case however, his email/password combination is part of large credential dump hosted on multiple websites you can easily find with Google - so even if he claims that the password was unique, he must have used it elsewhere.

I have no information whether any changes to the system in that regard are planned in the near future.
7008 cr points
Send Message: Send PM GB Post
Offline
Posted 2/23/16
I just notcied that my Email isn't what it should be and the password isn't mine either. How I do change them ?
Der Zoodirektor
23407 cr points
Send Message: Send PM GB Post
34 / M / Germany
Online
Posted 2/23/16

WreckGarrr wrote:

I just notcied that my Email isn't what it should be and the password isn't mine either. How I do change them ?


Follow the steps outlined above.
You must be logged in to post.