Account breached / multiple accounts?

[Spellslinger]

I messaged just popped up on my PC by AVG Antivirus saying my epicnpc account has been breached and it asked me to change password which I just did. However now it says I have multiple accounts which I don't, I assume whoever tried to log on my account also had that other account "multiple account".

I am kinda confused because I have TWO FACTOR AUTH since forever... so I am not sure how anyone can log on my account?

https://www.epicnpc.com/members/spellslinger.331959/#multiplelogins

did anyone else have similar problems on epicnpc or is it just me?

 

[iAccomplish]

Strange..never happened. But Im keen to see what others say about this

 

[Spellslinger]

Yes really weird, because I have 2Factors auth on...

 

[doomedtofail]

Does not look like he could post. but usual questions would be did you sell anything to someone from Slovenia ? you did not sell any accounts or email accounts attached to a game with the same password as your epicnpc? Is your password easy enough to guess?

Do the basics and run a system scan with antivirus and anti malware. check your email see if it has any logins not from you. If you have email account that provides that info.

 

[Spellslinger]

no my password is strong and I only use it on epicnpc, the email does not have any traces of logins as I have phone auth on the email also. I have phone auth on epicnpc so it should be impossible for anyone to log on it anyways hence I am not sure why it says I have multiple accounts? I sold over 2000 accounts but none of them had same password as epicnpc or email.

 

[Adoxia]

So after checking IPs on the multiple account it also has been using a VPN while the Slovenia seems to be the original IP. You may have done a transaction with someone that was on a VPN and you were unaware of it.

 

[The Integrity]

How can your antivirus know that your account on some website has been breached?

I think the accounts get linked the moment someone logs in, even before passing 2 factor auth.

 

[Spellslinger]

^ I have no idea, and I am guessing that's the case regarding multiple accounts, someone must have managed to get my password somehow, and logged on but failed because of hte 2 factors auth. I don't know why how, my AVG just popped up in middle of my screen saying EPICNPC account has been breached please change password... how? No idea...

 

[doomedtofail]

Its sounds like AVG password protection is enabled.

two factor does not prevent login, but it does prevent any changes to account or damage.
Its always possible it was brute force or someone got your account information somewhere.

 

[EpicNPC]

I don't know if this was a hack, there's some strange activity on these two accounts so I'll contact Spellslinger privately.

As doomed said, 2FA does not prevent login, however the account is completely disabled until the code is entered, so they can't do anything.