Odd Player Hack Story

Ok first lemme stress that this did not happen to me. It was a close friend in my LS and all the details i have are received second hand.

Last night while we were in sky traveling from one God island to another. Normally there are a couple stragglers traveling from one island to another or people building TP etc so we don't do a head count RIGHT AWAY. One of our sacks stopped to grab a Curtana ??? so was a little behind as well. He is coming up to the island and sees our thf naked fighting a groundskeeper in only xknife. He dies and HP right away. 10 mins later that sack gets tells from the thf from one of his alt accounts. He says he is spam trying to log in and cannot.

When he DOES get back to his account he finds that all of his gil has been mailed and his expensive items (hagun osode lu-shangs etc). He does still have a couple of items as it appears the offending party was attempting to mail asap and get out. He checked the mailer NPC and said the field that normally says where the items were shipped to is blank.

Here is where things get weird. He has the SE token. He manually enters his password at the login screen when he does login by clicking the screen instead of typing. He also is known for not logging out entirely and just sitting at the character select screen when and if he does go afk. He said it had been at least 24 hours since he had last logged in. To me that is more than enough time for the token to have expired.

Now before i get the obligatory jackasses who are going to attempt to troll this post i would like to say a couple things. 1) I'm mystified as to how this happened since he has token and hadnt entered 1 time password in over 30 mins. It will bother the crap out of me until i know how. 2) Im hoping to get a heads up out to others so maybe we can nip this in the bud before it gets anyone else. 3) I had a false sense of security after getting my token which is now shaky.

Also, I origionally thought this had to be due to gross negligence on his part or a lapse in judgement. In retrospect, he is the calm, quiet, calculating type and has no shortage on intellect. I do not think that he could have oopsed this in any way. No one has access to his account aside from his dad either (who plays on the same account). This rules out it being an inside job or a jealous roomate etc.

Cheers and thanks for reading. I hope no one else has any issues like this and again this is secondhand information (not my account) before you all line up to flame me. Thanks again!