so my gf @JasminePetrole may have had her minecraft account stolen. she submitted an email. I noticed going through the "change email" process on my minecraft account and there's NOTHING sent to my current e-mail to confirm that I want to change it? only directions sent to..

the NEW email address. Nothing sent to my old one. so if someone knows an email and password associated with an account they can steal the minecraft account with ease. what kind of security is that? like sending the "switch email confirmation should be sent to your ORIGINAL..

e-mail, not the new one. that is 100% backwards and bad practice. Literally get someones e-mail and a password cracker online and I could start stealing minecraft accounts today. it's that easy. holy crap

@MojangSupport @MojangSupport @Minecraft so TL;DR. Changing your email requires ZERO confirmation on your current e-mail address so it's insanely easy to take over an account once you know someones login information.