EA has claimed that there has been no security breach on their end but I still see a number of these first hand accounts popping up. If you're worried about someone gaining access to your account take some simple precautions before something bad happens.
- Change your password. Make sure your password used on Origin is a unique password that you don't use elsewhere. This is a good general rule of thumb for any site. If you can't remember multiple passwords, use a password manager like LastPass, 1Password, or KeePass.
- Update your security question if it's one you commonly use elsewhere.
- Enable two-factor authentication for your Origin account. EA apparently added this security feature recent-ish and didn't really tell anybody. It's there. Just go to Origin > Account & Privacy > click on the Security tab and turn ON the "Login Verification"
- If you're still paranoid, make sure you remove any payment methods you may have on file with Origin. Sure, it could be a hassle if you buy things through Origin on a regular basis, but it could help with peace of mind.
I'm not even sure if the rep deleted my fake account properly as requested. I specifically told him I only created it to contact them, and want the fake deleted when I can access my real one again. The rep assured it is deleted completely, but for some reason I could still log into the account later that day. Maybe it's gone now. Don't know.
Oh and I tried phoning their helpline, it's a voicemail telling you to login to Origin and contact them through the support website (ARRRRRRRRRRRGH!). Couple this with a clueless rep who has no idea how two-factor authentication works, and the inherent flaw that contacting EA Support requires logins to work (I saved a log because the conversation was so stupid I wanted to remember and share this with people I know), and I spent HOURS fixing a ten-minute issue.
I just turned two-factor back on because I'm assuming the authentication servers are working again, but I am going to be SUPER P***ED OFF if I just doomed myself again. I DO NOT WANT TO CREATE ANOTHER FAKE ACCOUNT AND TELL EA SUPPORT TO TURN IT OFF ON MY REAL ACCOUNT AGAIN! THAT TAKES HOURS TO EXPLAIN APPARENTLY!
Point is, it's a good idea to use two-factor, but know that there is no way to contact EA when the authentication servers go down again due to heavy traffic. You need to create a new account, contact EA Support, and pray you randomly run into someone competent on live chat. (And shame on those of you who call EA Support to complain about Mass Effect's storyline... This is exactly why they hire morons to run customer support.)