I got this before. The hacker subscribed for an authenticator and it totally locked my account out. As the mobile authenticator is cheap (below USD2 i think), the hackers now have a way to get full control of your account and you are not able to change your password in time.

Took me around a week to get the authenticator removed.
I needed to provide secret question, secret answer, WOW original CD key and some other details in order for them to validate that it is your account and remove the authenticator.

Shortly after providing them the info, they removed the authenticator and i'm able to log in and play back. I heard that some hackers managed to get database from blizzard thus compromising a lot of the accounts. At one point a lot of people got the ban hammer for economy exploitation.

Perhaps you manage to reset the pw in time before the hacker manages to do more damage to your account. I actually stopped playing for a couple of months. The suddenly I got an email stating that I have transfered my character to Blood Furnace and Gorefiend.

Then out of curiosity I try to log in my account since if someone made the transfer it should've been active. To my surprise same password but got the authenticator message. Went to reset my password and wrote to blizzard about account being compromised. They were quick in restoring my items that were sold/deleted, and kept sending feedback mails to me.

But I still could not log into my account due to the authenticator. Wrote to them explaining about the entire situation, then someone from blizzard dealt directly with me via email. Took a few mails to verify stuff to ensure that the account was indeed mine and not some random fella trying to steal account, had to give a few personal details like secret answer, Ori WoW CD Key. Nothing about my IC/ID etc. Few days later, got mail about authenticator removed and I could log in. The hacker had subscribed 1 month with his own C/C I guess, so I played that 1 month. Now that C/C is not valid so I'm just on my own lol...

Howdy!

Thank you for replying with the serial number for the Authenticator currently attached to this account.

As we are able to correctly verify the requested information, I have removed the Authenticator from the account xxxxx as requested. You should now be able to access the account without inputting the Authenticator code.

If you have any questions about this process, feel free to reply to this email. Alternatively, you may also reach our Billing and Account Services team via phone for live assistance. Billing representatives are on hand to take your call between 8 am and 8 pm Pacific Time, 7 days a week at 1-800-59-BLIZZARD (800-592-5499). Customers in Australia should call 1-800-041-378.


Regards,

Matthew K.
Billing & Account Services
Blizzard Entertainment
www.worldofwarcraft.com

The above is the email reply from Matthew K from their Billings team. The email he used to write to me is from:
"wowaccountadmin@blizzard.com" <wowaccountadmin@blizzard.com>

Definitely a genuine one as it resolved my authenticator issue. Check your email headers to ensure that the sender is not spoofed. Sometimes hacker can spoof the sender mail but when you reply its to a different email. As long as its XXX@blizzard.com should be fine. Not XXX@BIizzard.com or Blizzerd.com etc...

I'm tempted to get the mobile authenticator. Searched their website but doesnt include N80 in their list.

Glad you manage to get your account back. Blizzard staff are really getting more and more prompt in customer service.