The gaming website Eurogamer was alerted to the issue Oct. 11 from a reader who said the credit card associated with his gaming account was drained to purchase a content pack for "FIFA 12," the popular soccer game made by Electronic Arts for the Xbox 360.
Several posts on an Xbox forum point to the same problem. "Account somehow moved to another console on 2nd October, Fifa 12 achievements and 7200 points purchased and spent immediately off my linked card," read a post Oct. 4 on the forum.
Another post the next day read, "This just happened to me too JUST NOW!! Sitting on my sofa checking email and got a confirmation note that I had purchased 6000 points for ~ $75. Called them right away, they locked the account, but not before whomever did it bought 2000 points worth of 'PREMIUM GOLD PACKS.'"
Microsoft responded to the hacking claims, telling SecurityNewsDaily, "We do not have any evidence the Xbox Live service has been compromised." The Microsoft representative admitted that "a limited number of members have contacted us regarding unauthorized access to their accounts by outside individuals." Microsoft said it is working with these affected customers to "resolve any unauthorized changes to their accounts."
Microsoft is freezing the accounts of affected customers for 30 days to investigate the claims. Users on the Xbox forum are encouraging others to change their passwords.
EA Sports' communications manager, Steve Frost, directed SecurityNewsDaily to two EA forums which feature tips on how to stay safe and include examples of what a phishing site looks like compared with the real gaming websites.
This incident comes a week after Sony, no stranger to cybercrime itself, froze 93,000 online accounts after the gaming giant detected mass unauthorized login attempts on its Sony Entertainment, Sony Online Entertainment and PlayStation Networks.