Sorry to hear that's what's happening. I'll try to shed some insight on the Security aspect. If there is any account takeover's they do rely specifically on whatever platform service it is as Bungie.net doesn't store actual login credentials - they used saved authentication tokens for third party websites, which simply validates if it's correct or not correct and doesn't store any actual credentials. This has been the case for many, many years you can refer to items below : [url]https://www.bungie.net/en/forums/post/61302338?showBanned=1&path=1[/url] [url]https://www.bungie.net/en/forums/post/60334936?showBanned=1&path=1[/url] [url]https://www.bungie.net/en/forums/post/59758836?showBanned=1&path=1[/url] [url]https://www.bungie.net/en/forums/post/10622004?showBanned=1&path=1[/url] Anyone can always review Bungie's [url=https://help.bungie.net/hc/en-us/articles/360048721292-Account-Security-Guide]Account Security Guide[/url] including information on Compromised Accounts. If someone actually gets access to an account, I would review other security measures through the Platform Account, updating Software, Session/Cookies Browser and extensions, potential downloads and staying away from fishy websites and unknown links, staying away from "cracks/hacks/cheats" etc. There are a number of security tools that can be enabled on accounts now days, including [url=https://support.microsoft.com/en-us/account-billing/set-up-a-security-key-as-your-verification-method-2911cacd-efa5-4593-ae22-e09ae14c6698]Microsoft[/url] and [url=https://www.playstation.com/en-us/support/account/set-up-passkey-psn/]Sony PSN[/url] supporting all the way up to Digital and Physical Hardware Security Keys without using Passwords at all for authentication. Ultimately, it is on each user to setup their own security measures for all their accounts they're linking. Bungie is going to follow the policy that is setup within their company, and the only way to prove to Bungie that you are the genuine owner is being able to authenticate all accounts in your setup, there is no way around this.