Re: hacked accounts

not realy: in other systems (steam for example) when you do log-in from very different part of world it sends email to confirm that it is realy you

even if you dont have any 2 step authetication

and yes - this is general approach that everybody expected

also this 2 step is not very easy to find: i created my account from origins and i dont remeber anything about 2 step during this registration procedure (and i also dont remember how many years ago it was)

and ofcorse i wasnt expected that somebody will try to hack my account that has only f2p game that everybody has access to

what do you mean?

i have sms sonfirmation for each login for my email. nobody get access to my email except me

but in same time somebody got access to my origin account without getting access to my email

because i have 2 step authetification on my email account

and dont have on my origin account (and i had not very strong password)

Yep. This is surprise for me also. Who can be interested in account that have only f2p game? And even if you get access to it you cant sell any items from it.And real owner can restore access very easy. That is why i wasn't very bothered about protection. My acc was used for playing with cheats and for boosting someone else's account (in one night my rank jumped from plat4 to diamond3). But again i dont understand: isn't it easier to create new account from scratch for this purpose? Or it is because of restriction in ranked in plat+ when you can take in team only people with similar rank?

I have games in my origin account, none of them were used.
Nothing changed in my account, name, password, profile image, etc.
The only changes I noticed were in my apex account, had skins I never used because I didn't like them. My missions were done when I left the game at 1 AM in my place the daily missions reset at 3 AM, there is no way for me to do something two hours in the past. My rank was slightly boosted I hit D3 and stopped playing rank, but my rank had around 100 or 200 more points that I could have because I don't play ranked in D3 I only reach it.

In November 12 of this year I received this

YOUR MEGA ACCOUNT HAS BEEN LOCKED FOR YOUR SAFETY; WE SUSPECT THAT YOU ARE USING THE SAME PASSWORD FOR YOUR MEGA ACCOUNT AS FOR OTHER SERVICES, AND THAT AT LEAST ONE OF THESE OTHER SERVICES HAS SUFFERED A DATA BREACH.

While MEGA remains secure, many big players have suffered a data breach (e.g. yahoo.com, dropbox.com, linkedin.com, adobe.com, myspace.com, tumblr.com, last.fm, snapchat.com, ashleymadison.com - check for details), exposing millions of users who have used the same password on multiple services to credential stuffers . Your password leaked and is now being used by bad actors to log into your accounts, including, but not limited to, your MEGA account.

I suspect this has something to do with this, I changed my origin password in July of this year so I didn't bother, my password is different but have almost the same letters and numbers.

It s hard to me to comprehend, did EA banned their public IP and hardware? I would like to see my login history including devices.

@systemchangedHave you even contacted MEGA to see if it was this? It can't be assumed they most likely may want verification of said breach.

What you may have done is just set yourself up for a rollercoaster. If not contacted mega then you very well may of clicked on a keylog or even worse at times link which then did its magic.

Scammers/Hackers can make any web page in this world look and do and say exactly as the original would. It is very possible you did not get it from official mega. You be shocked how good some these are.

As for IP I do not believe many companies inside the united states can ban the IP of someone inside the united states. If I recall its something to do with denying of a public access. They will HWID ban in heart beat though. 

Also like to note this breach happen in 2018. The emails are still some how circulating. Why I ask if its actually legit. 

Yes, it is from MEGA
I always look at the e-mail direction and search it before clicking any link, in fact I didn't use the link in the mail
I thought the banned email from EA was phishing but it wasn't

@systemchangedI can also send you to what you think will be the mega link its not too hard for software engineer to do. Why I asked have you actually called them to see because this breach was in 2018. Game came out Feb 4th of 2019.

Also never ever click links. Copy and paste for your safety. 

No call, just enter through mega official page, thanks