It's still unclear whether or not the companies involved are sharing profits for the hijacked account purchases, as they would standard DLC. According to Toulouse, details on license transactions cannot be discussed, "but suffice to say both sides work together to help ensure the attackers do not profit." That's the core here; the attackers are to blame. It's easy to get mad at Microsoft and EA because we--as members of the gaming community--can point to them as a "known enemy." The issue is we don't know who the attackers are, so we point place the blame on them. EA and Microsoft certainly need to streamline the process of recovery and investigation, but as long as FIFA 12 Ultimate Team Packs have a real-world value attached to them, some of us are going to be caught in the crossfire. Next week, we conclude our investigation with a look at more Microsoft policies, including security measures beyond the initial log in of Xbox.com and how easy it is to move your online persona to the snowy region of Russia.
My account shows I've played FIFA 12, but it's all part of the scam.