I got hacked on Saturday; hacker played FIFA 12 and got two achievements (setting up a team and buying something -- I'm guessing the second requires the first). Thankfully, the only credit card I had on file was an old VISA gift card, long since expired. The 2,400 M$ banana dollars that were already in my account were drained, though. Sucks, but at least the damage was limited. Still, I've got 3 preorders dropping next Tuesday and a Live account that's locked until at least early December (and, by the looks of this thread, maybe longer).
Does anyone have any idea how they might be exploiting this recovery process? I.e. do they have my e-mail address/password combination (so I should be changing it on other sites that use that combo, as I have been), or were they able to recover the account without that info via some exploit?
If M$ is aware of this issue and it is an exploit that resulted from allowing gamertags to switch regions (what I gather from earlier comments in this thread), why isn't M$ reverting to an older system? I mean, yea, they'll upset the people who want to change region, but I have to assume that number of people is much lower than the amount of accounts left vulnerable to a known exploit/attack.