Hacked account recovery

[theta1]

Earlier today I received an email saying that the email address of my bitcointalk account (theta) was changed, and then another one saying that my password was changed.
The only option available was to lock the account and then try to recover it.
I did lock it and then checked the instructions for recovery (https://bitcointalk.org/index.php?topic=497545.0). They require signing a bitcoin address or a PGP key that was previously mentioned and therefore is known to belong to the account holder.
The problem is I haven't publicly disclosed either so according to these instructions I can't recover my account.
I find this hard to believe.
First of all, how come an email address change is allowed without confirmation or at the very least time-locking from the previous email address? And how come I can't recover it now, again by returning ownership to the original email address?
There must be another way to recover it. What shall I do?

[DeeDee_2]

I've had the same problem today.

Somebody can help me?

I've  lock the account with the option:

then you can visit the following link within 14 days in order to lock the account:

https://bitcointalk.org/index.php?action=seclock;u=368688;t=1512321576;o=Y2lnYXJyb3NleGlAZ21haWwuY29t;n=QlRDRGVlRGVlQHlhbmRleC5jb20%3D;c=PEdzKGXBuflStusl1gbGtl%2BTC%2B2MonPKm8tgQOHw02A%3D

[KWH]

Read the sticky in meta.

[vetal1212]

Hello, I would like to know if my account on Bitkojntolk got hacked, how can I restore it? And do you need documents?)

[ibminer]

I did lock it and then checked the instructions for recovery (https://bitcointalk.org/index.php?topic=497545.0). They require signing a bitcoin address or a PGP key that was previously mentioned and therefore is known to belong to the account holder.
The problem is I haven't publicly disclosed either so according to these instructions I can't recover my account.
I find this hard to believe.

Can you sign a message from this address?

1DUFbqqEf8PeH2ZpKf7ovLWpVLMh6urP63

https://web.archive.org/web/20140715150836/https://bitcointalk.org/index.php?action=profile;u=84992

[theta1]

I did lock it and then checked the instructions for recovery (https://bitcointalk.org/index.php?topic=497545.0). They require signing a bitcoin address or a PGP key that was previously mentioned and therefore is known to belong to the account holder.
The problem is I haven't publicly disclosed either so according to these instructions I can't recover my account.
I find this hard to believe.

Can you sign a message from this address?

1DUFbqqEf8PeH2ZpKf7ovLWpVLMh6urP63

https://web.archive.org/web/20140715150836/https://bitcointalk.org/index.php?action=profile;u=84992

YES!
This is the address I signed and sent the signed message to Cyrus and Theymos in PM.
I'll send it to you too (in about 6 minutes that I will be allowed to with this new account)
edit: it's 1 hour actually, not 6 minutes, so I'll send you the PM later.
edit2: there's another limit, of 2 PMs a day, so your PM with the signed message (that 4 other people including Theymos and Cyrus already have) will arrive later tonight.

[theta1]

PM sent last night

[BackBachvsUp]

Seems a lot of people got their account stolen :|
Mine was stolen yesterday, only just two weeks to become a full member.
I already reported mine to admin but I'm stupid, I submitted the wrong data.
Now I have to wait for another 24 hour to be able to send another pm.

[ibminer]

I did lock it and then checked the instructions for recovery (https://bitcointalk.org/index.php?topic=497545.0). They require signing a bitcoin address or a PGP key that was previously mentioned and therefore is known to belong to the account holder.
The problem is I haven't publicly disclosed either so according to these instructions I can't recover my account.
I find this hard to believe.

Can you sign a message from this address?

1DUFbqqEf8PeH2ZpKf7ovLWpVLMh6urP63

https://web.archive.org/web/20140715150836/https://bitcointalk.org/index.php?action=profile;u=84992

Message was signed and verified in PM, signed message was dated "2017.11.24", which is after the suspected hack.
I've left feedback to alert others.

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account theta has been hacked. Please reset the email to <omitted for privacy>. The current date is 2017.11.24.
-----BEGIN SIGNATURE-----
1DUFbqqEf8PeH2ZpKf7ovLWpVLMh6urP63
G3Ze1Ug1KQy2rjt972Wrx8a7JhB6ykUHcV2AUyUUOqRhU02ufgJylGyIWSRykq6wf/BX19zqMXeRVN4zVtLdIFA=
-----END BITCOIN SIGNED MESSAGE-----

[theta1]

I did lock it and then checked the instructions for recovery (https://bitcointalk.org/index.php?topic=497545.0). They require signing a bitcoin address or a PGP key that was previously mentioned and therefore is known to belong to the account holder.
The problem is I haven't publicly disclosed either so according to these instructions I can't recover my account.
I find this hard to believe.

Can you sign a message from this address?

1DUFbqqEf8PeH2ZpKf7ovLWpVLMh6urP63

https://web.archive.org/web/20140715150836/https://bitcointalk.org/index.php?action=profile;u=84992

Message was signed and verified in PM, signed message was dated "2017.11.24" which appears to be before the suspected hack. I've left feedback to alert others.

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account theta has been hacked. Please reset the email to <omitted for privacy>. The current date is 2017.11.24.
-----BEGIN SIGNATURE-----
1DUFbqqEf8PeH2ZpKf7ovLWpVLMh6urP63
G3Ze1Ug1KQy2rjt972Wrx8a7JhB6ykUHcV2AUyUUOqRhU02ufgJylGyIWSRykq6wf/BX19zqMXeRVN4zVtLdIFA=
-----END BITCOIN SIGNED MESSAGE-----

Thanks for verifying the message. Can you please clarify what you mean regarding the date.
2017.11.24 is the day after the hack. I received the email about my account's email address and password change on Thu, Nov 23, 2017 at 5:35 PM (GMT), then followed the instructions to lock my account, created this new account and posted this thread on the same day, and then I tried to find a btc address linked to me. I found the one you posted as well, and signed it on November 24th (the following day).
Is there something else that I need to do?

[ibminer]

Thanks for verifying the message. Can you please clarify what you mean regarding the date.
2017.11.24 is the day after the hack. I received the email about my account's email address and password change on Thu, Nov 23, 2017 at 5:35 PM (GMT), then followed the instructions to lock my account, created this new account and posted this thread on the same day, and then I tried to find a btc address linked to me. I found the one you posted as well, and signed it on November 24th (the following day).
Is there something else that I need to do?

Sorry - that was a typo, and is fixed now.  
FWIW, I believe you've satisfied the requirements for recovery, the archived address goes back to 2013, so it's enough proof. Cyrus or theymos are the only two that can recover the account though, and it can take some time. If you have sent messages to both, waiting is your only next step.

[theta1]

Thanks for verifying the message. Can you please clarify what you mean regarding the date.
2017.11.24 is the day after the hack. I received the email about my account's email address and password change on Thu, Nov 23, 2017 at 5:35 PM (GMT), then followed the instructions to lock my account, created this new account and posted this thread on the same day, and then I tried to find a btc address linked to me. I found the one you posted as well, and signed it on November 24th (the following day).
Is there something else that I need to do?

Sorry - that was a typo, and is fixed now.  
FWIW, I believe you've satisfied the requirements for recovery, the archived address goes back to 2013, so it's enough proof. Cyrus or theymos are the only two that can recover the account though, and it can take some time. If you have sent messages to both, waiting is your only next step.

Thank you. That's fine, I can wait, I just don't want to lose the account. I assume it remains locked until further action is taken by the mods?

[hoticotk]

Hello please help me.
my account was hacked too,
i sent message to @ Cyrus
But i dont know how to sign the message,

[Shazam!!!]

Hello please help me.
my account was hacked too,
i sent message to @ Cyrus
But i dont know how to sign the message,

Follow these directions.

https://bitcointalk.org/index.php?topic=990345.0


 You will also need proof of your address from an older post before it was hacked.
Put your address into google search. Hope this helps a little. Goodluck!!!

[theta1]

Bump
Hope a mod will have a look

Thanks for verifying the message. Can you please clarify what you mean regarding the date.
2017.11.24 is the day after the hack. I received the email about my account's email address and password change on Thu, Nov 23, 2017 at 5:35 PM (GMT), then followed the instructions to lock my account, created this new account and posted this thread on the same day, and then I tried to find a btc address linked to me. I found the one you posted as well, and signed it on November 24th (the following day).
Is there something else that I need to do?

Sorry - that was a typo, and is fixed now.  
FWIW, I believe you've satisfied the requirements for recovery, the archived address goes back to 2013, so it's enough proof. Cyrus or theymos are the only two that can recover the account though, and it can take some time. If you have sent messages to both, waiting is your only next step.

Thank you. That's fine, I can wait, I just don't want to lose the account. I assume it remains locked until further action is taken by the mods?

[Shazam!!!]

Once either Cyrus or Theymos reset the account, please let us know how the notification process work... Do they reply to our PM or do we periodically check the email address we asked them to reset to? Thank you for the clarification!

You will receive a PM that simply says: UNLOCKED. That's all I received when
mine was unlocked last month. My account wasn't hacked so, it could also contain
simple instruction for keeping your account safe.

[dxbcoin]

Oh I just learned something pretty practical. Thanks a lot guys!

[theta1]

Once either Cyrus or Theymos reset the account, please let us know how the notification process work... Do they reply to our PM or do we periodically check the email address we asked them to reset to? Thank you for the clarification!

You will receive a PM that simply says: UNLOCKED. That's all I received when
mine was unlocked last month. My account wasn't hacked so, it could also contain
simple instruction for keeping your account safe.

Was that a PM in the new account?

[Shazam!!!]

Once either Cyrus or Theymos reset the account, please let us know how the notification process work... Do they reply to our PM or do we periodically check the email address we asked them to reset to? Thank you for the clarification!

You will receive a PM that simply says: UNLOCKED. That's all I received when
mine was unlocked last month. My account wasn't hacked so, it could also contain
simple instruction for keeping your account safe.

Was that a PM in the new account?

Yes, it's in the new account, in which you have sent the signed message.

[theta1]

Bump
Can someone please look into this?