XBL accounts hacked to buy FIFA packs

UPDATE: Microsoft has told Eurogamer that it's aware of a few incidents of "unauthorised access" and is working with the relevant individuals to remedy the situation.

However, the spokesperson insisted there is no evidence of a wider Xbox Live security issue. Here is its statement in full:

"We do not have any evidence the Xbox Live service has been compromised. We take the security of our service seriously and work on an ongoing basis to improve it against evolving threats.

"However, a limited number of members have contacted us regarding unauthorised access to their accounts by outside individuals. We are working with our impacted members directly to resolve any unauthorised changes to their accounts.

"As always, we highly recommend our members follow the Xbox LIVE Account Security guidance provided at www.xbox.com/security to protect your account."

ORIGINAL STORY:A number of Xbox 360 owners have reported their accounts compromised and credit cards used to buy FIFA-related content.

Reports suggest FIFA Ultimate Team content packs are the target for those who have gained access to accounts.

Eurogamer was first alerted to the issue by reader Speedjack, who on 11th October found his gamertag had been "recovered" to someone else's machine.

"I then find out that I've had 5000 then 500 MS points bought on my credit card. Better yet, all the points including the 120 I had already on my account are gone... all spent on FIFA 12 content packs yesterday afternoon while I was at work.

"Not only that, but my account now has 35 FIFA 12 achievement points on it!!! Never played the game in my life - hate football."

Speedjack spoke to Microsoft support, which suggested there exists an issue with EA's servers that leaves XBL accounts vulnerable.

It is important to note that at this stage there is no evidence to support this claim, and it is unclear exactly how widespread the issue is.

However, Speedjack is not alone in having his XBL account compromised and used to buy FIFA-related items.

A detailed report on the Goosterblog recounts how one user suffered an XBL account hack - also used to buy FIFA Ultimate Team packs.

The report offers a number of explanations, including one specific to FIFA that involves hackers emailing EA support and the EA server then sending over the victim's Xbox and EA account information.

There is also a similar report on forum Facepunch, and multiple users' reports on the Xbox.com forum.

Microsoft support is freezing accounts affected for up to 30 days as it investigates complaints.

EA was unable to comment on the situation when contacted by Eurogamer, but the company did point our readers towards the EA forum, which offers advise on how to protect user accounts.

It contains information on fake emails and copycat websites, phishing, redirects, scare tactics and password integrity.

Microsoft advises any users affected to contact its Xbox support service. Its Account Security page has more information.

Just picked up on this as I have been away for a week, so which of you Fifa bods have done this then

Slightly worrying if it is an issue between EA's servers and XBL.

Whilst this is bad, I hope there is not a wider implication across the rest of EA's range with BF 3 on the horizon.....

My thoughts exactly......

Why dont M$ just start randomly banning people? thats what normally happens.......

I am so glad I don't play fifa and also that I don't use credit card to pay for anything on live, always use the scratchcards.

FWG Rigor Mortice wrote:Why dont M$ just start randomly banning people? thats what normally happens.......

They are 'freezing' accounts that have been affected while they investigate. So if your account has been hacked, and your credit card defrauded its a bit of a double whammy as I assume this is similar to a suspension, but short term.

Difficult one for M$ really as they have to investigate but there should be a better way of handling these accounts until resolved. I hope they give those users something back for freezing their accounts......

As for banning those that have hacked the accounts, Im sure they could issue console bans once they find out where the content was downloaded to?