Microsoft says it's looking at ways to penalize users who used an exploit published online to obtain free Microsoft Points for Xbox 360, and that the company will invalidate any of the codes generated through the illegitimate method.
"We are aware of the situation and have taken steps to invalidate the codes obtained illegitimately" said the company in a statement to Gamasutra, explaining that illegal activity is a violation of Xbox Live's Terms of Use.
A gaming forum user with the handle "Dark" posted instructions for the exploit on a message board a few days ago, and the information quickly spread.
"We take safety and security very seriously and require that Xbox Live members use the service in compliance with applicable laws and specifically prohibit people from engaging in illegal activity as a part of our Terms of Use and Code of Conduct," continued Microsoft's statement.
"Our Policy and Enforcement team is evaluating whether or not certain individuals have violated the Terms of Use for Xbox Live and will take the appropriate enforcement on an individual basis. Codes obtained legitimately by users will not be impacted," it concluded.
Since news of the exploit first surfaced, numerous media outlets have reported that the stolen points amounted to over $1 million in value. Microsoft told Gamasutra that amount is "inaccurate," but declined to specify: "We can’t share specific numbers, but the figure is nowhere near the amount that has been reported," said the company.
Kidding aside, I'd really like Microsoft to revamp their Live service and the Dashboard itself.
And I agree. It's called saving your money lol.