O M G !!! I just watched both videos, this is not just bad, this is seriously BAAAD, and I'm keeping it polite, but deep inside the rage levels are sky high and my profanity filters have had to be overclocked with LN2 cooling to keep this post clean.
Ok, that's just not acceptable at any level, but I think there are legal avenues we can go down, at least for us Citizens in the UK and Europe because if it's that easy for people to be able to get into our accounts and then access information relating to our emails, social accounts and maybe even payment methods, then we have protection under the GDPR and grounds to report Activision to the Information Commissioner's Office (ICO).
If Activision do not correct these issues and respond to allegations that they have neglected to take measures to safeguard their customer data then they could face heavy fines, fines that would be considerably more than it would cost to implement account security for customer accounts.
I just spoke to an ICO agent on chat about what to do if we have concerns about our data security, this is the response I got from him:
- I'm afraid it is neither my role, nor the role of the ICO's live services, to provide an assessment on any data protection concerns an individual brings to us. The function of this chat is to provide you with brief/general advice about your rights and aspects of the legislation.
- If you are concerned about the way Activision is handling your information, you should first raise this in writing/e-mail with them. We expect them to take action to resolve your concern. We have more guidance and a template letter in relation to raising a concern here: https://ico.org.uk/your-data-matters/raising-concerns/”
So, start by reaching out to Activision using this template letter, the letter suggest giving them a 30-day period to respond.
Further (or prior depending on how you feel) to that, you can also take a look at
Activision's Privacy Policy where they proudly show off their
ESRB Privacy Certified Program membership.
You can raise a complaint about your account being hacked with
ESBR here.
I hope this helps.
Just to clarify, don't contact ESRB about your friend's account being hacked, contact them about how Activision have not taken adequate steps to allow your friend to secure the account and the data held within it.
Make it about the account and privacy, not about the hack.
Sent from my CLT-L09 using Tapatalk