Hey, I thought I could chime in. Since its my post and security breach that caused all this concern.
I have 2 accounts. One using my support email, and another using gmail. The gmail was just my personal one i used to log into the launcher, the support is my seller account with all the important stuff.
Sunday morning at 5:13 I got 2 emails chains from both each separately saying this message:
(EDIT)Paraphrasing to avoid Epics emails, I was told it was a no no. ‘They just said my request for email change was completed’.
This apparently was in response to an original message of just:
***(EDIT)Paraphrasing to avoid Epics emails, ***I was told it was a no no. ‘Just a case number sent to them’
Both email chains were identical, with the same case#. And one came minutes after the other. And soon after both of accounts emails were switched, 2 new accounts were made using my support and gmail.
And in both email chains, the message seems to be just ‘sent’ to my support and gmail. I checked my gmail and my hosting emails sent, nothing was sent from my emails as far as I can tell. And if it was, the only thing they messed with was just the Epic account? They could have done a LOT more harm if they had those emails, than just switching my paypal over. So I dont know what exactly happened on Epics side, but I dont think it was my email being compromised and making the request. I could be wrong, if so, id like to see the emails sent to Epic to confirm thats the case, and then id have a new bag of issues to deal with. haha
The issue was quickly resolved. One purchase was made on the account(and refunded). They switched over my paypal. Epic froze everything. Remedied the situation. And im very grateful to the team at how fast they responded. I do agree, whatever mess led to this, could have been avoided with a bit more stringent security policy. I am always in favor of more preventative measures than reactionary ones.
I never meant to throw Epic or anyone under the bus with my post, I just saw some scary stuff going down with OurMine on my account, and knew they hacked into the Unity servers only a week or two ago. So I just wanted to alert everyone of my unfortunate situation and maybe catch the issue early if it was indeed a bigger issue. Which is wasnt.