Nexon's response to getting hacked?

That's only useful if it's actually something you have control over and prevent.

So true. If they legitimately crack all three (four?) security programs, I think they deserve the $100 worth of stuff in my account. And the ensuing criminal complaint.

"Thank you for playing Maplestory.

As mentioned in previous notices, we plead you to secure your NEXON ID and PASSWORD and to change it frequently.

There have been a spate of account hacking on the web including the use of key loggers to steal log-in information and hacking account on different websites and services using a compromised set of ID and password.

Also there have been evidence recently of "some sort of a list" being used in brute force log-in attempts.

As such, there have been many complaints to our customer support about direct loss of in-game items and NX due to account hacking.

We, Nexon, will work to improve the security environment and improve the situation but we urge our customers to take the following precautions and protect yourselves on your own.

• Do not access suspicious websites
  
• Improve the security environment of your computer
  
• Do not use easy to crack passwords
  
• Change passwords on a regular basis
  
• Change password after playing the game on a public computer
  
• Use different passwords for different services
  
• Use a software keyboard (Impossible in JMS client)
  

Also there have been cases of having both the NEXON account and e-mail account compromised. Do not use the e-mail account's password as the NEXON ID password and change it regularly.

Nexon has several guides on security precautions. Please read them again in addition to this notice.

Thank you for playing.

from official website, posted on the 17th

The bolded part is basically what people said above. The red part bothers me.

 Spoiler

I'm guessing the brute force attempts are first-hand account of Nexon; the line that says there's been reports of brute force attempts is on a separate new line. Nexon is also using a euphemism so they don't have to admit any possible incidents ("there have been cases of...on the web" is easily interpreted as "we have experienced..."). This and the massive botting that's going on in JMS since late-August might mean they're running multiple clients on the same computer (or they have access to cheap computers/internet access). If you isolate the log-in console, you could potentially brute force crack accounts (NEXON IDs can be identified by signing up to new accounts using random IDs). It's simply a guess but if this is true, there is no self defense. See first quote