So i am selling my account , some guy asked to log in so i let him log and gave him the security code , in less than 1 minute FIRST NAME , EMAIL AND BATTLE TAG changed......im currently talking with GM , but there must be a new method around.
UPDATE : Spoke with GM and everything was reversed .