I got the FIFA hack about a month ago. I was actually watching my brother play online when my XBL name popped up online. Talk about a WTF moment. I told my brother to instantly message him as I scrambled to cancel my credit card and get Microsoft on the phone. Luckily, all he had time for was to collect the 2800 MS points I had sitting in my account and didn't charge any more to my card.
What really kills me about this is that Microsoft hasn't admitted that their security has been breached. They CONTINUE to say that anyone who has fallen victim to this was a victim of a phishing scam. Essentially, they're saying it's OUR faults. Not only do we get hacked, but Microsoft blames us for it. They said that we must've given some of our information out online in a scam. I've heard many people say that that's not possible. I'd like to think the vast majority of us on GAF are internet literate and know not to give our personal information up in one of those 'free MS points' scams.
Anyway, they locked my account and I actually got it back quickly (ten days?). I changed my Windows Live password and since my credit card is cancelled, the next time it happens, they can't charge points to my card. I also try to keep my MS point balance to as close to zero as I can get it. Which kind of sucks because now I'll wait until the math works out to buy points to use on games. By that, I mean if I see a game for 800 points, I'm not buying it until I see another game I want for 800 points to be able to redeem a 1600 point card and use it immediately.
If anyone has their credit card, debit card or paypal account linked to their Xbox, don't say you'll take it off later. Do it now, because I didn't think that this stuff would ever happen to me.
On a final note, it really bothers me that the game press isn't covering this better. Playstation had a security breach, shut their service down COMPLETELY and then came back with an apology (free games) when they finally got it back up. Microsoft, on the other hand, had a security breach, lied and said that they didn't, blamed their customers for it and continue to leave their service up where people are suffering from the same scam each and every day.
And the worst part? We're all paying for this service. It feels like a huge 'fuck you' to me after being hacked.