I found out about it two or three years ago, during one of the many threads on the WOW forums complaining about account security.