Courthouse News Service has details on a class action suit filed against Blizzard for consumer fraud, unjust enrichment, negligence, breach of contract and bailment over being asked to pay for an authenticator to secure Battle.net accounts (thanks na p), noting that Blizzard has made $26 million selling these things at $6.40 a pop (apparently their presumption is they are free to manufacture). Here's word:

Bell claims that Activision and Blizzard require gamers to use online accounts at the Battle.net website, which collects and stores customers' private information.

Blizzard puts the onus on gamers to buy additional products or tighten security on their devices, rather than making customer accounts more secure, Bell claims.

"Defendants negligently, deliberately, and/or recklessly fail to ensure that adequate, reasonable procedures safeguard the private information stored on this website. As a result of these acts, the private information of plaintiffs and class members has been compromised and/or stolen since at least 2007," according to the 33-page complaint.

"Most recently, on or about May 19, 2012, reports proliferated that class members' Battle.net accounts had suffered a security breach ('hack') at the hands of unknown parties ('hackers'), and on or about August 4, 2012, hackers massively breached Battle.net's security and acquired the private information of all of defendants' customers in the United States, as well as the remainder of North America, Latin America, Australia, New Zealand, and Southeast Asia."

Though account details for millions of gamers were compromised or stolen, Bell says, neither Activision nor Blizzard took "the legally required steps to alert" gamers.

Bell seeks class damages and an injunction to bar the defendants from "tacking on" undisclosed costs after customers have bought games, and from requiring them to sign up for Battle.net accounts.