yes you should report to mihoyo, although i dont think you will get any solution from them but nevertheless at least they would be aware about it.

are you using a generic password? or perhaps have at any point login with the same information on 3rd party site / given the password to someone else?

Aiyoyo so scary a lot accounts go hacked dy eh......

I need to keep change password le...

nothing much you can do really, mihoyo don't rollback accounts

don't reuse your password on anything that you are not willing to lose

check your email and password at https://haveibeenpwned.com/ . im sure its already pwned

EDIT: also don't trust any links online, not even the link on top. google and do your research on it and decide for yourself if it is safe to enter your email and password

This post has been edited by Szzz: Mar 27 2021, 01:16 AM

first thing i do is change password...
and already email mihoyo regarding this,
just want to know they can tell me that time is login from where...
the gacha i dont care...
just start save the gem again...

Don't mind me asking (sorry didn't browse earlier pages)

Are you using Mihoyo account or Facebook?

Are your accounts linked?

using mihoyo account....
got linked to facebook...

I suspect the Mihoyo account could be source of breach.

My account was (un)fortunate that link can't be done for some reason so I'm still using FB manual log in every day with 2FA.

Does linked account have to go through the 2FA?

Nope, linked account only make the hackers unable to change the password.

They can still log in the accounts and waste all our saved gems or destroy all the 5* weapons and artifacts...

Did you recently login to any website? Or you password only numeral?

A lots of people get hacked recently, but when ask about login website...all just being quiet......
We just want to know whether mihoyo password system already getting pawned or just Player being phished...


BTW, i do happned twice that my account being log-out from PC platform, usually auto-log in, then suddenly required to key-in password again...
But none of any item gone, prolly no gem to spend ? Of course i changed password afterward, and since no log-out issue anymore.

Did any major update auto force you retype password when log-in?

This post has been edited by altk1989: Mar 27 2021, 09:00 AM

So they don't have my FB login with 2FA, yet they can find way in?

Mine is ALWAYS ask me to re-login, except for some occasions when it still remembers me. That's where I log out and log in again shortly after.

Oh so using FB login got 2FA? Using mihoyo account don't have 2FA.... Not sure about linking account to FB tho, I only linked email and phone number.

Yeah, so I key in FB login details on the game. It will send request to the phone, if I don't approve on phone the login won't happen.

Recently only login to mihoyo official website....
All 5* weapon/artifact no missing,
Suddenly got razor and several char which I dont have before.....

So the fella just go into pull on your behalf .........

I see..... We should have the same feature on mihoyo accounts as well.

I change password every week, it's troublesome but that's the only way I have now....

do not link to FB. i previously started playing using fb account and then i linked to mihoyo account (because if use fb need to keep login everytime i start the game). one day i could not login to the game anymore and when i login to my mihoyo account from the website i could not see the linkage to the fb anymore

contacted CS, took 2 weeks to recover my account

YES. That's why I tried to link, but my link attempt failed.

So now actually I have to account on GI. First being my main account while the second one is the 'mistake' account of which I never use.

So those who got hacked is due to their email & password have been compromised long time ago? Hacker just brute force in with a database of login details they have from long ago?

It's not a recent 3rd party website that has been phishing for our Genshin login details?

Cause I'm aware of cheaper BP, Welkins & primogem buying service. So I always thought that's the source of the phishing.

Its probably both, mostly the first one. Not neccessarily breached long time ago too. I had my password breached recently and its not reflected on HIBP yet. And they literally have records of billions of account. Luckily its just a throwaway password I reuse on nonimportant websites.