Ok, I reset password. Twice now. I go to change it. It does not confirm the change or anything. I even checked to see if the user name is the same. It is now slightly different. And using that one does nothing.
Listen guys. Whatever tribble you killed, replace it already. I think my phoenix is getting real lonely in there. When he goes manic it will be on you.
After the revalation that the first and last four of my credit card, and my personal information has been given away to nefarious people through lax security, I am now beginining to understand the compromise of the credit card I only use for STO purchases, and the occasional lunch.
Last fall I had a charge that I did not authorize appear on the card, it was for $4.90. I instantly called my bank and canceled the card, and picked a new one up on the way home. The charge was by PXFORCE.net, some company that sells icons, (of all things).
Since I now know that most of my credit card data was revealed, I can now surmise how my credit card was breached. Many of my friends blame it on STEAM, but i never use this card for STEAM.
(Odd thing this morning, someone tried to unsuccesfully guess my secret questions to gain access to my Yahoo.com, and Yahoo subsequently sent me a notice to my work email. I've had this account since 1996, and I've never had this happen before.)
I came online with compuserve in 83. I've seen and played alot of games online. I've never had a card breached. Until now.
So my question to you good folks here, has anyone seen a charge on their credit card for a company called pxforce.net, possibly for $4.90? And, are you a STEAM user? You might want to check your credit card statements.
I was told by my bank that pxforce.net apparently is being invesitgated by the attorney general of Flroida for massive credit card fraud of thousands of people.
Lastly, I am not here to antagonize our overlords, (haha), I just want to find out if anyone else has been subject to the same as I.
I lost nothing muahahahaha I got and email from cryptic basically saying they caught this early and changed my password for me before they could do any damage, all my stuff's there.
UP YOUR *** CHINESE HACKER SCUM!
Cheers Cryptic! Thanks for saving my characters asses!
I lost nothing muahahahaha I got and email from cryptic basically saying they caught this early and changed my password for me before they could do any damage, all my stuff's there.
UP YOUR *** CHINESE HACKER SCUM!
Cheers Cryptic! Thanks for saving my characters asses!
The stupid website would not send me my Password Reset for over 24 hours!
Plus, how in any way does this make sense?
I did not sign up to actually PLAY, until this past January of 2012.
I signed up for Emails in 2009 when the game was still under developement, and only emails... but could not afford to sign up to play until after it went F2P...
Then in January 2012 after signing up to play, I changed my Cryptic Password from what it was originally...
So how in the world would MY account be at risk from a hacking that took place in 2010!!
Anyone?
Does this make any sense at all??
Oh well...
/rant off.
I can start playing with my little virtual cyberspace Micro Machines Starship again...
I'm getting really frustrated as I've been trying to get some kind of confirmation for hours via email and I've received nothing to reset my password. Am I doing something wrong? Is there another butg I don't know of?
I'm getting really frustrated as I've been trying to get some kind of confirmation for hours via email and I've received nothing to reset my password. Am I doing something wrong? Is there another butg I don't know of?
For starters you never will be able to until you log out of the forum and then access the log on page.
There are multiple threads with instructions and answers to problems people are having.
No. NO. NO!!! There IS a problem!!! I am trying to reset my son's password and the reset password link keeps taking me to the home page.
I had the same issue on 4/26/12 - It can be slightly confusing at first. Just make sure that you're on the CRYPTIC site not the PWE site.
This is how I resolved it --> I correlated it with the email I received - make sure you check your email that was sent to you for specific instructions. It should provide you with the appropriate links.
It doesn't matter... It's not on their front page (where a responsible game publisher would post an announcement like this, to show they're on point and care that you know about this), the links to the Cryptic announcement on their site don't link to this forum to see player response, let alone a FAQ article to sum up all of the Moderator feedback given to the players after the announcement so we don't have to comb through 30 pages of "OMGWTF?!!" All of which are small things to offer. If it's a manner of suppressing player reaction, this is something that will get us to look for the forum to complain. Putting up no links to the forums or news is akin to telling us to shut up in so many words. It's just us peasants. Change your passwords, and cross your fingers that's all that happened.
Like any other Free-to-play title that reports this, unfortunately, I am removing my bank account information. Sorry, I'm fully free-to-play from this point forward. Same as I've learned on Nexon, if it happens once, it's most likely going to happen again now that those folks know you're susceptible. (No one is impervious to hackers, but a reputation is like a crystal glass... once cracked, good luck repairing it.) Not that it makes a difference if our bank info was exposed, just that I'd be dumb to leave it on for the next attempt. Fool me twice and all, nothing personal. I do the same on any other F2P game/provider (I'm upset with this, I was LIVID with Sony last year, just to put a scale on it.) I'm still interested in STO, and if Perfect World's cards work on here (someday? today?), I'll still partake of Cryptic Points. I do like what's come of things as of late.
To sum up, I'm not one for overreaction. I've paid plenty on this account, and I'm not closing it, but I'm also not pleased with the response to this. I get it, and I know that a reality of Free-To-Play titles is frequent security issues (as account server Username/Passwords are like crack to RMT folks, let alone pilfered bank account info), but this could have been handled better. Much better.
.................... took me 3 days to get to customer support... took me 3 days and 1 hour for my brain to say "oi ***got... you used TRIBBLE@thismail.com" ..
walllaaa problem solved.
feel sorry for other people who used a different email than what their using now though.
Did that. Twice. It does give me the page. It doesn't confirm the change. I've assumed it is not setup to do so like some other places. Annoying. Waited hours and still invalid user name or password. I can check my mail. See a couple of other things. Account is still there. I didn't even get a e-mail warning.
Listen. I'm greatful. Really. I'd put in they need to take some of that money to get you a nomex suit for in here sometimes. But this is really not being handled right. I read the notice. It is badly thought out. The wording is suggestive. I assume they just send you the same messages.
I remember that my e-mail account was accessed by someone in Dec 2010, and my WOW account Was TRIBBLE and mined for resources too (I was dumb enough to have the same password for all three, yes I know). At least I know where they got my details from now!
My impression was that this was security breech discovered earlier in the life of the game and just now revealed to the public after having been sealed. A pratice not at all uncommon in both the Government and private sectors.
If thats not the case then I offer my apoligies to Cryptic for getting the wrong impression from the numerous threads on the subject that led me to believe we playerws had been the last to know and after the fact.
I don't expect or believe in the Hack-proof system, my being letdown was over the impression we where the last to know. Seen enough corps and departments over the years cover there own butts first and securing victoms last to have a strong distaste for such pratices. It has colored my view to the negative in these situations.
While I also have concerns, they allegedly just confirmed the breach recently. Why there was a delay in *detecting* the breach is a concern, they have told us in the notice at Cryptic's site (which was posted yesterday - the saem day the emails were sent) they themselves didn't know about it until recently. It was detected, and when it was detected, the notifications were sent.
It sucks they didn't know - but that's what hackers do - they try to keep from getting caught.
As a matter of habit, security is utmost concern for me at all times. I may be getting easily spooked in my older age and biting before I bark in this situation.
If the breech was just recently confirmed and not a hidden secret before being quelled, then I can hold no ill will to Cryptic in how they handled it.
If you are having trouble logging into your account, your accounts password may have been locked during our account server maintenance today. You can recover your password via the forgot password link on the official Star Trek Online or Champion Online websites:
For full details on why accounts were locked today, please read the notification here.
Apologies for the inconvenience.
Customer Service
Cryptic Studios
I can log into the home page with the new password.. but my account is still not accesssable in game. I go to log in and it is still giving me a problem and I am not the only one experiancing this. Another member of our fleet can log into the cryptic points end and nothing else.
I can log into the home page with the new password.. but my account is still not accesssable in game. I go to log in and it is still giving me a problem and I am not the only one experiancing this. Another member of our fleet can log into the cryptic points end and nothing else.
Don't forget to select either accounts if you remember your type. Perfect World or Cryptic Account.
I can log into the home page with the new password.. but my account is still not accesssable in game. I go to log in and it is still giving me a problem and I am not the only one experiancing this. Another member of our fleet can log into the cryptic points end and nothing else.
Had something like that happen too. My new password let me in and out of the forums for one thing.
This morning, I found I couldn't log back into the forums, again tried the link Branflakes put in. This time it actually worked right. I was logged out of the forums every time before. It would except a change here. All I can say is keep trying.
I want to keep this on the front page! This is Day 2 of me being locked out of one of my accounts (this one was created well after Dec. 2010 and not affected). It's not just a simple password reset. The account is GONE....the system does not recognize it. I've sent a bug report from this account for it (not ackknowledged yet) and an email to support (also not acknowledged yet). Does PWE have ANYONE actually working in Customer Support? I realize that one person may not sound so important but I'm a Gold Member and have played this game loyally, supporting it with not only my payments but C-store purchases on both accounts. Yet, there seems to be nothing being done to correct this issue for many of us affected by this totally unnecessary action.
Although it's been done and there's no going back, couldn't you have just sent an email telling us to reset our passwords, maybe done something that tells us it's expired and we need to reset it on the launcher, or I dunno, maybe just left it alone and let us change the info instead clumsily deleting or scrambling who knows how many accounts and then not immediately and urgently correcting the problem? This is customer service ?
Somewhat annoyed here. Tried to logon and couldn't, so came here and read BranFlakes post, fair enough, its good to see they are taking action, though more than a little unnerving to see it took a year and a half to find the intrusion.
My issue is that firstly, I didn't receive the email from Cryptic informing me of the problem (perhaps I wasn't affected in the hack but then why lock my account without telling me?).
Secondly, having followed BranFlakes' instructions and used the reset password link, nothing happened. No email (yes, I checked my spam folder), I wasn't logged into the forum (I couldn't as it said my password was incorrect). I tried the forgotten password link several times, still no email, tried the forum's forgotten password link, still no email.
Decided to leave it a few hours, just in case their system was overloaded and taking time to process the password reset requests, still no email.
In desperation, I noticed a link to the Champions-on-line site to reset your password. Now I don't have a Champions signon, never tried that game but followed the link and got the reset email virtually straight away. What's going on with the other password reset links?
TLDR - If you try the STO reset link and its not working, try the Champions one, it just may work, even if you don't have a champions account.
This information may have been imparted elsewhere in this thread but I haven't got time to read all 60 pages. Any chance a mod / BranFlakes can edit the OP and add the suggestion to try all the reset links if the one you first try doesn't work - might save other customers from needless frustration. EDIT: Or even better, fix the STO reset link so that it works!
I think I've finally figured out what happened on my account.
When I registered for the account back in Beta, I had another email address. Since then, I've switched ISP's, gotten a new email address, and this was "originally registered" on this account, which is why it's only showing this one account for that email address.
However, I've got a nice little CATCH-22 for you guys -- since I no longer have the email account that I "originally registered" the account under, and would be in the old 2010 data that was TRIBBLE, I can no longer access or recieve the password-reset email for it!
The old account, and the one I cannot access, had all that information updated with the new email address for contacts and I had gotten email to it from various items over time from Cryptic/PWE (such as buying Cryptic Points, etc.) Soooooo...one big question---why are you still using the original registration email and not the email that is currently on the account? After 2 years of playing, you think some people might have changed their email at some point in that timeframe?
The next really obvious question -- how am I now supposed to change the password??
Comments
Listen guys. Whatever tribble you killed, replace it already. I think my phoenix is getting real lonely in there. When he goes manic it will be on you.
After the revalation that the first and last four of my credit card, and my personal information has been given away to nefarious people through lax security, I am now beginining to understand the compromise of the credit card I only use for STO purchases, and the occasional lunch.
Last fall I had a charge that I did not authorize appear on the card, it was for $4.90. I instantly called my bank and canceled the card, and picked a new one up on the way home. The charge was by PXFORCE.net, some company that sells icons, (of all things).
Since I now know that most of my credit card data was revealed, I can now surmise how my credit card was breached. Many of my friends blame it on STEAM, but i never use this card for STEAM.
(Odd thing this morning, someone tried to unsuccesfully guess my secret questions to gain access to my Yahoo.com, and Yahoo subsequently sent me a notice to my work email. I've had this account since 1996, and I've never had this happen before.)
I came online with compuserve in 83. I've seen and played alot of games online. I've never had a card breached. Until now.
So my question to you good folks here, has anyone seen a charge on their credit card for a company called pxforce.net, possibly for $4.90? And, are you a STEAM user? You might want to check your credit card statements.
I was told by my bank that pxforce.net apparently is being invesitgated by the attorney general of Flroida for massive credit card fraud of thousands of people.
Lastly, I am not here to antagonize our overlords, (haha), I just want to find out if anyone else has been subject to the same as I.
Thanks in advance.
If you lost your stuff there is a procedure for rolling back your account save from before it was TRIBBLE.
They did it for the Fleet Leader of Jupitor Force and he went through how it works on a Stoke'd episode.
My only concern is maybe they gave him special treatement because he is on just about every episode.
UP YOUR *** CHINESE HACKER SCUM!
Cheers Cryptic! Thanks for saving my characters asses!
Oh my...
Your late to the pic nic.
They did this to a whole bunch of us.
Its old news.
The stupid website would not send me my Password Reset for over 24 hours!
Plus, how in any way does this make sense?
I did not sign up to actually PLAY, until this past January of 2012.
I signed up for Emails in 2009 when the game was still under developement, and only emails... but could not afford to sign up to play until after it went F2P...
Then in January 2012 after signing up to play, I changed my Cryptic Password from what it was originally...
So how in the world would MY account be at risk from a hacking that took place in 2010!!
Anyone?
Does this make any sense at all??
Oh well...
/rant off.
I can start playing with my little virtual cyberspace Micro Machines Starship again...
Yeah, I know, I just have a little sliver of hope
For starters you never will be able to until you log out of the forum and then access the log on page.
There are multiple threads with instructions and answers to problems people are having.
Start here.
http://forums.startrekonline.com/showthread.php?t=268025
You need to be logged out to use the link.
Cheers,
Brandon =/\=
I had the same issue on 4/26/12 - It can be slightly confusing at first. Just make sure that you're on the CRYPTIC site not the PWE site.
This is how I resolved it --> I correlated it with the email I received - make sure you check your email that was sent to you for specific instructions. It should provide you with the appropriate links.
Like any other Free-to-play title that reports this, unfortunately, I am removing my bank account information. Sorry, I'm fully free-to-play from this point forward. Same as I've learned on Nexon, if it happens once, it's most likely going to happen again now that those folks know you're susceptible. (No one is impervious to hackers, but a reputation is like a crystal glass... once cracked, good luck repairing it.) Not that it makes a difference if our bank info was exposed, just that I'd be dumb to leave it on for the next attempt. Fool me twice and all, nothing personal. I do the same on any other F2P game/provider (I'm upset with this, I was LIVID with Sony last year, just to put a scale on it.) I'm still interested in STO, and if Perfect World's cards work on here (someday? today?), I'll still partake of Cryptic Points. I do like what's come of things as of late.
To sum up, I'm not one for overreaction. I've paid plenty on this account, and I'm not closing it, but I'm also not pleased with the response to this. I get it, and I know that a reality of Free-To-Play titles is frequent security issues (as account server Username/Passwords are like crack to RMT folks, let alone pilfered bank account info), but this could have been handled better. Much better.
walllaaa problem solved.
feel sorry for other people who used a different email than what their using now though.
Did that. Twice. It does give me the page. It doesn't confirm the change. I've assumed it is not setup to do so like some other places. Annoying. Waited hours and still invalid user name or password. I can check my mail. See a couple of other things. Account is still there. I didn't even get a e-mail warning.
Listen. I'm greatful. Really. I'd put in they need to take some of that money to get you a nomex suit for in here sometimes. But this is really not being handled right. I read the notice. It is badly thought out. The wording is suggestive. I assume they just send you the same messages.
As a matter of habit, security is utmost concern for me at all times. I may be getting easily spooked in my older age and biting before I bark in this situation.
If the breech was just recently confirmed and not a hidden secret before being quelled, then I can hold no ill will to Cryptic in how they handled it.
I can log into the home page with the new password.. but my account is still not accesssable in game. I go to log in and it is still giving me a problem and I am not the only one experiancing this. Another member of our fleet can log into the cryptic points end and nothing else.
Don't forget to select either accounts if you remember your type. Perfect World or Cryptic Account.
Go to crypticstudios.com and read the notice. It's best to get it from the source instead of from a bunch of us who are theorizing...
Had something like that happen too. My new password let me in and out of the forums for one thing.
This morning, I found I couldn't log back into the forums, again tried the link Branflakes put in. This time it actually worked right. I was logged out of the forums every time before. It would except a change here. All I can say is keep trying.
Although it's been done and there's no going back, couldn't you have just sent an email telling us to reset our passwords, maybe done something that tells us it's expired and we need to reset it on the launcher, or I dunno, maybe just left it alone and let us change the info instead clumsily deleting or scrambling who knows how many accounts and then not immediately and urgently correcting the problem? This is customer service ?
My issue is that firstly, I didn't receive the email from Cryptic informing me of the problem (perhaps I wasn't affected in the hack but then why lock my account without telling me?).
Secondly, having followed BranFlakes' instructions and used the reset password link, nothing happened. No email (yes, I checked my spam folder), I wasn't logged into the forum (I couldn't as it said my password was incorrect). I tried the forgotten password link several times, still no email, tried the forum's forgotten password link, still no email.
Decided to leave it a few hours, just in case their system was overloaded and taking time to process the password reset requests, still no email.
In desperation, I noticed a link to the Champions-on-line site to reset your password. Now I don't have a Champions signon, never tried that game but followed the link and got the reset email virtually straight away. What's going on with the other password reset links?
TLDR - If you try the STO reset link and its not working, try the Champions one, it just may work, even if you don't have a champions account.
This information may have been imparted elsewhere in this thread but I haven't got time to read all 60 pages. Any chance a mod / BranFlakes can edit the OP and add the suggestion to try all the reset links if the one you first try doesn't work - might save other customers from needless frustration. EDIT: Or even better, fix the STO reset link so that it works!
When I registered for the account back in Beta, I had another email address. Since then, I've switched ISP's, gotten a new email address, and this was "originally registered" on this account, which is why it's only showing this one account for that email address.
However, I've got a nice little CATCH-22 for you guys -- since I no longer have the email account that I "originally registered" the account under, and would be in the old 2010 data that was TRIBBLE, I can no longer access or recieve the password-reset email for it!
The old account, and the one I cannot access, had all that information updated with the new email address for contacts and I had gotten email to it from various items over time from Cryptic/PWE (such as buying Cryptic Points, etc.) Soooooo...one big question---why are you still using the original registration email and not the email that is currently on the account? After 2 years of playing, you think some people might have changed their email at some point in that timeframe?
The next really obvious question -- how am I now supposed to change the password??