How the heck are we gonna keep our accounts safe when not even the Blizzard Authenticator keeps ppl from hacking accounts??

While discussions on account security are definitely encouraged, presenting specific cases with (at best) second-hand information is hardly helpful. Such cases may be presented without the full picture (even to friends and family), and for reasons both legal and ethical we will not be able to share the missing parts.

Closing this thread.

(And the above statement about "the full picture" is a general one, not specifically about this case.)