You think MS support personnel would know better.

Microsoft reversed itself on Friday, confirming that some vandals have likely been able to con its Xbox Live support personnel into giving up users' personal information and assigning accounts to malicious thieves.

Taken from SecurityFocus.com.