Blizzard Sued over Battle.net Authentication


Recommended Posts

LOS ANGELES (CN) - Publishers of "World of Warcraft" and other blockbuster video games make millions by "deceptively and unfairly" charging customers for an after-sale security product to protect their private information from hackers, a class action claims in Federal Court.

Lead plaintiff Benjamin Bell sued Blizzard Entertainment, of Irvine, and its corporate parent, Santa Monica-based Activision Blizzard.

Bell seeks class damages for consumer fraud, unjust enrichment, negligence, breach of contract and bailment. He claims that the same security problem, and after-market fix, occurs in defendants' games "Starcraft" and "Diablo."

Bell claims that game players have to pay $6.40 for a product called the Authenticator to protect their private information from hackers.

Sales of Authenticators, which come as a physical product or download, have brought in $26 million, according to the complaint.

Bell claims that Activision and Blizzard require gamers to use online accounts at the Battle.net website, which collects and stores customers' private information.

Blizzard puts the onus on gamers to buy additional products or tighten security on their devices, rather than making customer accounts more secure, Bell claims.

"Defendants negligently, deliberately, and/or recklessly fail to ensure that adequate, reasonable procedures safeguard the private information stored on this website. As a result of these acts, the private information of plaintiffs and class members has been compromised and/or stolen since at least 2007," according to the 33-page complaint.

"Most recently, on or about May 19, 2012, reports proliferated that class members' Battle.net accounts had suffered a security breach ('hack') at the hands of unknown parties ('hackers'), and on or about August 4, 2012, hackers massively breached Battle.net's security and acquired the private information of all of defendants' customers in the United States, as well as the remainder of North America, Latin America, Australia, New Zealand, and Southeast Asia."

Though account details for millions of gamers were compromised or stolen, Bell says, neither Activision nor Blizzard took "the legally required steps to alert" gamers.

Bell seeks class damages and an injunction to bar the defendants from "tacking on" undisclosed costs after customers have bought games, and from requiring them to sign up for Battle.net accounts.

The class is represented by Hank Bates with Carney Williams Bates Pulliam & Bowman, of Little Rock, Ark.

Activision Blizzard did not immediately respond to an emailed request for comment.

http://www.courthousenews.com/2012/11/08/52109.htm

-----------------------------------------------------------------------------------------------------------------------------------------------------------

Lawsuit alleges Blizzard "deceptively and unfairly" charged players to secure their data.

Blizzard is being sued over the Battle.net authentication used in multiple games including Diablo III. A class action suit led by plaintiff Benjamin Bell is seeking damages for "consumer fraud, unjust enrichment, negligence, breach of contract and bailment," claiming that Blizzard is "deceptively and unfairly" charging some users to secure their data from hackers.

Bell is specifically referring to Blizzard?s $6.50 keychain authenticators, alleging that Blizzard has made $26 million by selling them. The suit accuses Blizzard of unfairly requiring users to use Battle.net and says the company has continued to ?negligently, deliberately, and/or recklessly fail to ensure that adequate, reasonable procedures safeguard the private information stored on this website.? Bell points to multiple hacking incidents -- including May?s Diablo III hacks -- as evidence that Blizzard failed to take "the legally required steps to alert" players.

Bell is seeking damages and an injunction to bar Blizzard from ?tacking on? costs after games have already been purchased. He also seeks to stop Blizzard from requiring players to sign up for a Battle.net account.

We reached out to Blizzard about the suit and a spokesperson sent IGN the following statement:

"This suit is without merit and filled with patently false information, and we will vigorously defend ourselves through the appropriate legal channels.

We want to reiterate that we take the security of our players? data very seriously, and we?re fully committed to defending our network infrastructure. We also recognize that the cyber-threat landscape is always evolving, and we?re constantly working to track the latest developments and make improvements to our defenses.

The suit?s claim that we didn?t properly notify players regarding the August 2012 security breach is not true. Not only did Blizzard act quickly to provide information to the public about the situation, we explained the actions we were taking and let players know how the incident affected them, including the fact that no names, credit card numbers, or other sensitive financial information was disclosed. You can read our letter to players and a comprehensive FAQ related to the situation on our website.

The suit also claims that the Battle.net Authenticator is required in order to maintain a minimal level of security on the player?s Battle.net account information that?s stored on Blizzard?s network systems. This claim is also completely untrue and apparently based on a misunderstanding of the Authenticator?s purpose. The Battle.net Authenticator is an optional tool that players can use to further protect their Battle.net accounts in the event that their login credentials are compromised outside of Blizzard?s network infrastructure. Available as a physical device or as a free app for iOS or Android devices, it offers players an added level of security against account-theft attempts that stem from sources such as phishing attacks, viruses packaged with seemingly harmless file downloads, and websites embedded with malicious code.

When a player attaches an Authenticator to his or her account, it means that logging in to Battle.net will require the use of a random code generated by the Authenticator in addition to the player?s login credentials. This helps our systems identify when it?s actually the player who is logging in and not someone who might have stolen the player?s credentials by means of one of the external theft measures mentioned above, or as a result of the player using the same account name and password on another website or service that was compromised. Considering that players are ultimately responsible for securing their own computers, and that the extra step required by the Authenticator is an added inconvenience during the log in process, we ultimately leave it up to the players to decide whether they want to add an Authenticator to their account. However, we always strongly encourage it, and we try to make it as easy as possible to do.

Many players have voiced strong approval for our security-related efforts. Blizzard deeply appreciates the outpouring of support it has received from its players related to the frivolous claims in this particular suit."

http://ca.ign.com/articles/2012/11/10/blizzard-sued-over-battlenet-authentication

Dumb. #1 It's optional and not mandatory. #2 It's a free app on smart phones. #3 You're not actually paying for a physical authenticator if you get one you're paying for the shipping. #4 Dumb.

  • Like 1

some people just don't get it.... Its a device to help the end user keep their password safe from forces OUTSIDE blizzards control.

side note: been playing for 6 years WITHOUT an authenticator and not once had my password compromised. For those without malwarebytes pro, yes, use an authenticator! ;)

some people just don't get it.... Its a device to help the end user keep their password safe from forces OUTSIDE blizzards control.

side note: been playing for 6 years WITHOUT an authenticator and not once had my password compromised. For those without malwarebytes pro, yes, use an authenticator! ;)

If you use more than one PC and/or move your laptop between two or more locations you pretty much need an authenticator or Blizzard will close your account for suspicious behavior or possibly having been hacked. Happened to both me and my GF several times now before we just added the authenticator to our smart phones, which is annoying since we both have secure passwords and this adds another annoying step to logon, granted you only need to really do it once per computer but still.

And you don't need malwarebytes to be secure, you just need common sense,

  • Like 2

If you use more than one PC and/or move your laptop between two or more locations you pretty much need an authenticator or Blizzard will close your account for suspicious behavior or possibly having been hacked.

Rubbish. Might happen to a small portion of people. I have D3 and/or SC2 and/or WoW on one machine at home, one at work for years, no issues at all, no software/hardware authenticators ever.

If you use more than one PC and/or move your laptop between two or more locations you pretty much need an authenticator or Blizzard will close your account for suspicious behavior or possibly having been hacked. Happened to both me and my GF several times now before we just added the authenticator to our smart phones, which is annoying since we both have secure passwords and this adds another annoying step to logon, granted you only need to really do it once per computer but still.

And you don't need malwarebytes to be secure, you just need common sense,

common sense comes in many many forms, some of which not everyone has, including you, and including me. I have 3 machines that i play wow on, not including my sons laptop so that makes 4. No log in issues.Maybe you are doing it wrong.

common sense comes in many many forms, some of which not everyone has, including you, and including me. I have 3 machines that i play wow on, not including my sons laptop so that makes 4. No log in issues.Maybe you are doing it wrong.

Nope, Blizzard even said it was because we moved our laptops and used multiple computers.

Sorry

common sense comes in many many forms, some of which not everyone has, including you, and including me. I have 3 machines that i play wow on, not including my sons laptop so that makes 4. No log in issues.Maybe you are doing it wrong.

If your using the same IP with the laptops you should not have any issues its when you change ips like myself because i use a VPN service. I have contacted blizzard twice about being locked out and the annoyance its caused me at having to change passwords for them to send two copy and pasted emails saying the same crap that its there for my added security to protect me against hackers and even then its taken five days per email to be responded too (probably because others are complaining).

As for the optional authenticator its overpriced and 9/10 cases just gathers dust its a waste of money and could be sent for users at a lower price.

"Free" smart phone app, another pointless thing that would just take up space on a phone that i dont use in fact right now it been off for a month and is sat on the table i see it as bloatware because i would never use it.

All in all i think blizzards "added" security is crap and a nuisance to those that use a vpn service as there is no way to add extra ips or to even turn it off if we wished to do so. Anyway im off for a full english.

It's almost a given that if you DON'T use an authenticator, your account WILL be compromised.

Blizzard is basically forcing their customers to pay because Blizzard's security is abysmal.

It's almost a given that if you DON'T use an authenticator, your account WILL be compromised.

Blizzard is basically forcing their customers to pay because Blizzard's security is abysmal.

umm no, that's BS. use a good password and you won't get hacked. neither me nor my girlfriend ever got hacked before we added our athenticators this summer.

It's almost a given that if you DON'T use an authenticator, your account WILL be compromised.

Blizzard is basically forcing their customers to pay because Blizzard's security is abysmal.

Nonsense, I played for six years and was never hacked. Use a proper password and some common sense. Certainly having an authenticator is a good idea, it's one more layer of security but saying you WILL get hacked without one is absurd. That said this lawsuit is ridiculous and should be thrown out.

if blizzard sells them for free and only charges shipping couldn't blizzard save a ton of money and time by shipping them en-masse to walmarts/target/etc to distribute for free to people who buy blizzard games?

No, because then people will complain that Blizzard didn't provide them with free transportation to pick them up from Walmart.

i was forced to use one by blizzard after my account was comprimised or they wouldnt reinstate my account, and hell it was thier fault my account was comprimised not mine

someone stealing your password because of your actions is their fault?

this suit is really stupid. they are claiming that they force people to buy something to guarantee security when they don't need to buy anything there are several free options and it is OPTIONAL additional security not mandatory. they are not suing saying that the servers not insecure they are suing about making money from the authenticators.

umm no, that's BS. use a good password and you won't get hacked. neither me nor my girlfriend ever got hacked before we added our athenticators this summer.

Nonsense, I played for six years and was never hacked. Use a proper password and some common sense. Certainly having an authenticator is a good idea, it's one more layer of security but saying you WILL get hacked without one is absurd. That said this lawsuit is ridiculous and should be thrown out.

Why pick a good password when you can pick a very strong and excellent one? Well, even if you do there's still a chance that your account can become compromised. Also, just because it hasn't happened to you in x amount of years doesn't mean that it can't happen to someone else in x amount of hours.

Case in point, I stopped playing WoW in December of 2010. In November of 2011, some Chinese farmer started running around on my toon. He was able to level my character to 85 and get a few achievements done before getting my account locked. So, my question was, how did someone just guess my password that contained a bunch of random upper and lower case letters, numbers, and symbols? It was a fairly new password that I only used for Battle.net. I did a deep system scan of OS X, and nothing turned up (note: nothing turned up in the years that I did scans.), and I make it a point to stay 100 miles away from UI addons, gold buying services, using the password for another service, or anything else under the Sun that could compromise one's account.

tl;dr, my **** is pretty locked down, but my account was still compromised.

Just two weeks ago, someone maliciously got into my Google account. However they managed to do it, (the password was even more random, longer, and stronger than my battle.net one) Google flagged it immediately and blocked them from accessing it, so now I use the two step verification.

I'm sorry, but the days of using just a good password and some common sense are long over. I don't even think that there were ever days doing only so was acceptable. Just because it hasn't happened to you yet doesn't mean that you're smart. It just means that you're lucky.

they don't need access to your computer to hack your WoW account, they could have hacked your gmail which you just said got hacked, they can do a man in the middle attack. they could have tricked you with one of the better versions of those scam emails they send out. there's any numbers of ways to do it and most of them is your fault not Blizzards.

Also I replied to a post that said, and I quote

It's almost a given that if you DON'T use an authenticator, your account WILL be compromised.

And lets face it, the majority of players don't get "hacked".

It's almost a given that if you DON'T use an authenticator, your account WILL be compromised.

Blizzard is basically forcing their customers to pay because Blizzard's security is abysmal.

This is pretty true. I had a secure password and stopped playing. About half a year later my account was hacked.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • All these CEOs got the biggest boners thinking about firing employees for AI. Turned out it was just a wet dream.
    • And the fact that the majority of people from Poland are white European Christians while the people you are complaining about in post after post are not is just a coincidence... Every sentence in your post I am replying to is racist nonsense. None of it is actually based on any facts whatsoever. All immigrants are seeking a better life too. It's literally the only reason they would risk everything and leave their homes, families, and homeland. They are working and contributing to the economy too, as you even admit. They get the same benefits your partner did AND that YOU are eligible for as well. That is one of the key things of the EU and a mark of a civilization. That is the definition of a society where everyone is given a chance, treated equally and fairly, and is judged by the content of their character, not their different skin color or which version of ignorant superstitious nonsense their parents lied about as children. Racists around the world said the same things about the Irish and Jews and Poles (like your partner) and...every other immigrant movement over the centuries. What's your family's heritage, by the way? Were your ancestors lied about with racist fearmongering crapola by self-entitled locals the same way as you are now? If someone like that said the same things about all people from Poland, like your partner, would they be right? Or would you want them to judge your partner based on who they actually were, not where they just happened to come from?
    • Again, this is an irrelevant attempt to attack the messenger. The truth does not require any justification.
    • Removed the blue and underline as you did not post a link. This would also  be considered spamming.
    • Why it's almost impossible to produce a smartphone in the United States by Hamid Ganji If you look at the back of some Apple products, you can see the famous phrase “Designed by Apple in California, Assembled in China.” This phrase appears on products from one of the largest smartphone brands in the United States. These products are designed in the U.S., but their manufacturing takes place in China, India, Vietnam, or even Brazil. But why can’t Apple, as one of the largest American tech companies, produce its iPhones on U.S. soil? The idea for this topic came to me after the Trump Foundation launched a smartphone called the T1 and claimed that it was designed and built with American values in mind. However, this claim did not last long, as it was revealed that Trump’s phone was actually a rebranded HTC U24 Pro, with only a gold case and minor internal component changes. You see? Even a phone that is supposed to represent American values is manufactured in China. With a gross domestic product (GDP) exceeding $32 trillion, the United States is currently the world’s largest economy, while China ranks second with around $20 trillion. On the other hand, the United States is by a wide margin the global leader in various technological fields, and American companies spend hundreds of billions of dollars annually on research and development. From Apple and Google to Microsoft, Lockheed Martin, Boeing, and others, American tech and industrial giants lead their foreign competitors in many sectors. The United States also has no shortage of smartphone brands. Apple, Google, and Motorola are among the major brands in the smartphone market, collectively holding a significant share. However, the vast majority of their products are manufactured outside the United States. So why is it that the world’s largest economy, home to the most advanced technology companies and industrial powers, cannot produce a smartphone on its own soil? Let’s explore this question together. Even threats to impose tariffs won’t work After Trump entered the White House as the 47th President of the United States, his administration adopted strict tariff policies. One of these policies was the imposition of a 25% tariff on smartphones manufactured outside the United States. Trump said he “had a little problem” with Apple CEO Tim Cook over producing smartphones outside the U.S. So he thought that threatening a 25% tax on imported phones might force Apple to bring manufacturing back to the United States. “I have long ago informed Tim Cook of Apple that I expect their iPhones that will be sold in the United States of America will be manufactured and built in the United States, not India, or anyplace else,” Trump wrote on Truth Social. Image via The White House Although Apple currently manufactures some of the iPhone’s chips in the United States with TSMC's help, it still shows no willingness to shift full iPhone production to the country. At the time, renowned Apple supply chain analyst Ming-Chi Kuo wrote on X, “In terms of profitability, it’s way better for Apple to take the hit of a 25% tariff on iPhones sold in the US market than to move iPhone assembly lines back to the US.” However, manufacturing a smartphone in the United States is not as easy as it might seem, and many technical and economic barriers are involved. The lack of necessary manufacturing hubs There is a clear reason why many companies prefer to manufacture their products in China. China has established itself as the main global manufacturing hub for international companies, and over the past few decades, large contract manufacturers have emerged there, allowing companies like Apple to outsource production. One such example is Foxconn, which also manufactures some Apple products in India. Building the infrastructure required to produce smartphones in the United States would require tens of billions of dollars in new investment. Factories would need to be built, essential manufacturing equipment would have to be installed, and, most importantly, a skilled workforce capable of operating these systems would need to be recruited and trained. The United States currently lacks the core infrastructure needed to manufacture smartphones, and for this reason, many companies prefer to outsource production to Chinese contractors rather than spend tens of billions of dollars to build that infrastructure, which is significantly more economically efficient. Additionally, building such infrastructure in the United States could take up to a decade, ultimately leading to a significant increase in the product's final price for consumers. Shortage of trained labor in the U.S. compared to China Decades of serving as a global manufacturing hub have allowed China to build a massive talent pool in the production sector that is almost unmatched worldwide. Today, if a company chooses to manufacture its products in China, it can be confident that the workers involved in production have years of experience in their respective roles and are capable of producing high-quality goods with minimal errors. Even if we assume that tens of billions of dollars were invested in building smartphone manufacturing infrastructure in the United States, finding skilled workers would remain highly challenging. Apple CEO Tim Cook visiting the iPhone 6 assembly line in China in 2014. Image: Tim Cook on X In a 2015 interview on CBS’s 60 Minutes, Tim Cook said the main reason Apple isn’t producing in the US is a lack of skills. "China put an enormous focus on manufacturing, in what you and I would call vocational kind of skills. The US over time began to stop having as many vocational kinds of skills. I mean you could take every tool and die maker in the United States and probably put them in the room that we're currently sitting in. In China you would have to have multiple football fields,” Cook said. Also, in 2017, at the Fortune Global Forum in Guangzhou, Cook once again emphasized the importance of highly skilled Chinese workers. “China has moved into very advanced manufacturing, so you find in China the intersection of craftsman kind of skill, and sophisticated robotics and the computer science world. That intersection, which is very rare to find anywhere, that kind of skill, is very important to our business because of the precision and quality level that we like. The thing that most people focus on if they’re a foreigner coming to China is the size of the market, and obviously, it’s the biggest market in the world in so many areas. But for us, the number one attraction is the quality of the people,” Apple CEO said. Higher labor costs in the United States Producing almost any product in the United States is more expensive than in many other countries, and one of the main reasons is the higher cost of labor in the U.S. According to the Bureau of Labor Statistics, median weekly earnings of full-time workers in the United States were $1,235 in the first quarter of 2026. Meanwhile, the average annual salary in China's private sector in 2025 was RMB 71,590 (US$9,961). In many parts of the world, the weekly wage of an American worker is equivalent to several months of income. Another important factor to consider is that in the United States, the workforce capable of working on a smartphone assembly line is highly specialized and therefore commands higher-than-average wages. According to an estimate by Bank of America, producing an iPhone in the U.S. is technically possible, but “iPhone cost can increase 25% purely on higher labor cost in the U.S.” However, this 25% increase applies only if final assembly is performed in the United States while components are still sourced from China or elsewhere. In this case, the price of a base iPhone would rise from $799 to around $1,000. But in another scenario, if Apple were to produce the required components for the iPhone within the United States, production costs could increase by more than 90%. Trump’s dream for a “Made in the USA” iPhone might never come true In a free-market capitalist economy, one of the primary responsibilities of any CEO is to maximize profit. Using Apple as an example, Tim Cook’s role is to maximize the company’s profits so that it can fund research and development for new products and invest in areas such as artificial intelligence, while also keeping shareholders satisfied. Therefore, it is entirely understandable that Apple would choose not to bring its manufacturing back to the United States and instead keep production in countries where labor is cheaper, and products can be manufactured at a lower cost, thereby maximizing its profit margins. What is your opinion about manufacturing smartphones in the United States? If you are an American citizen, would you be willing to pay hundreds of dollars more for a smartphone made domestically in the USA? Let us know in the comments.
  • Recent Achievements

    • Conversation Starter
      jessse3334 earned a badge
      Conversation Starter
    • Reacting Well
      JuvenileDelinquent earned a badge
      Reacting Well
    • One Month Later
      Excellence2025 earned a badge
      One Month Later
    • Week One Done
      Excellence2025 earned a badge
      Week One Done
    • Week One Done
      flexorcist earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      506
    2. 2
      +Edouard
      196
    3. 3
      PsYcHoKiLLa
      153
    4. 4
      Steven P.
      72
    5. 5
      FloatingFatMan
      65
  • Tell a friend

    Love Neowin? Tell a friend!