Skip navigation

iTunes store account hacked

663064 Views 1,939 Replies Latest reply: Apr 13, 2014 10:39 PM by Chris CA RSS Branched to a new discussion.
1 2 3 ... 130 Previous Next
stereocourier Level 1 Level 1 (0 points)
Currently Being Moderated
Nov 28, 2010 3:45 PM
I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."


"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?
Powerbook G4, Mac OS X (10.5.8)
  • roaminggnome Level 10 Level 10 (89,165 points)
    Currently Being Moderated
    Nov 28, 2010 3:49 PM (in response to stereocourier)
    It sounds like Apple customer service comes though again.

    Problem solved.

    Your password is changed, credit restored.

    Glad it turned out.
    powerbook g4, iMac 20, Mac OS X (10.6.4), Time Capsule, iphone 3gs, iphone 4, ipod, ipod touch
  • bmichael1 Level 1 Level 1 (0 points)
    Currently Being Moderated
    Nov 28, 2010 4:08 PM (in response to stereocourier)
    Oddly enough the same EXACT thing just happened to me also on 11/28 remainder of a iTunes giftcard balance used for music purchases (2 albums) that were not mine, same thing my City, State, Zip changed to Towson, MD. Credit card info wiped out etc.???

    I've contacted Apple, awaiting a response...
    iMac, MacBook, Mac OS X (10.5.8)
  • rseilham Level 1 Level 1 (10 points)
    Currently Being Moderated
    Nov 29, 2010 7:22 AM (in response to stereocourier)
    Same thing here. Same address and everything. They used $15 of a credit and wiped out my credit card. Apple is refunding the money, but reluctantly. I think I will avoid using my credit card with my account from now on and just purchase gift cards instead.
    iOS 4
  • Mike Johnson12 Level 5 Level 5 (6,300 points)
    Currently Being Moderated
    Nov 29, 2010 10:36 AM (in response to stereocourier)
    You don't mention if you store your password. I don't - I have to enter my password for each purchase session.

    MBP 2.66/4/500 - iTunes 10 - TV - iPhone 3GS 32 gig, Mac OS X (10.6.4), iPod Touch 32 - iPod Photo 60 gig - iPod 2nd gen 20 gig - Blue Shuffle
  • elcarmean Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 2, 2010 3:35 PM (in response to stereocourier)
    The exact same thing just happened to me with the order occurring on December 1st, with the same Towson MD zip code put in. Luckily I did not have a credit card connected to the account, so it only used $20.50 in gift card credit. I have e-mailed Apple and am waiting for a response.
    MacBook Pro 2.53 Ghz, Mac OS X (10.6.5)
  • kingstonza Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 6, 2010 7:54 AM (in response to elcarmean)
    Same thing has happened to me - $42 worth of credit from a gift card wiped out, and address changed to 1905 60th Place, Towson, MD, 21286-7840 with phone number (365) 8542658
    I have deauthorised all computers on my itunes account (there were 5 authorised - only ever had 4 before I THINK) and changed my password.
    Emailed Apple - waiting for a response.

    Why would hackers bother changing the postal address? Strange.
  • Mike Johnson12 Level 5 Level 5 (6,300 points)
    Currently Being Moderated
    Dec 6, 2010 8:00 AM (in response to kingstonza)
    Well - did you call the folks and see if they were the ones?

    Would be interesting if it was them or was it a prank (sick one at that) - You can't fix stupid.

    MBP 2.66/4/500 - iTunes 10 - TV - iPhone 3GS 32 gig, Mac OS X (10.6.5), iPod Touch 32 - iPod Photo 60 gig - iPod 2nd gen 20 gig - Blue Shuffle
  • kingstonza Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 6, 2010 8:05 AM (in response to Mike Johnson12)
    Just gone back through past purchases and see that there was another purchase about 2 weeks ago - $35 worth of credit. Didn't notice at the time (just lost track of how much credit I had!)
    Guess Apple will only refund one. As my dad says "you can write that money on your bum and take a bath"....
  • antthephoney Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 18, 2010 1:22 AM (in response to kingstonza)
    Ditto for me. Recieved an email yesterday telling me that the name and credit card had been changed on my account, and now the account is empty with a load of apps that I have never purchased! I wait the reply from apple to my email!
    Toshiba, Windows 7
  • mattyk72 Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 18, 2010 6:55 AM (in response to stereocourier)
    This very same thing happened to me yesterday, had $40 wiped out from a gift card balance. Address changed to the same Towson MD one. Waiting now for Apple to respond to my email.
    iOS 4
  • jcmcnamee Level 1 Level 1 (5 points)
    Currently Being Moderated
    Dec 18, 2010 7:52 PM (in response to mattyk72)
    Same thing happened to me in last three days. Got an email from apple saying my credit card info changed, which was weird. It actually was deleted from my account. Then 4 apps were purchased using $10 credit that I had. I notified apple, they refunded, and now the itunes store says I can't use my credit card. No Towson address change, though.
  • donkeyjacket45 Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 20, 2010 4:02 PM (in response to stereocourier)
    Had very similar thing too. Got £25 giftcard. Added it to my account but hadn't spent it. Couple of days later I get an email saying my Name and Credit Card details had been changed, and two receipts for £11.99 in app purchases that certainly were not mine. Credit Card details were wiped, and I became a Mr instead of a Ms.
    iTunes support were very helpful in giving me my money back, but I feel Apple are ignoring the bigger picture, that there is a massive scam going on and they need to do something about it fast. How many people are going to load giftcards on Christmas day and see them disappear?
  • flybriz Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 22, 2010 9:30 AM (in response to stereocourier)
    +1 for me. They wiped out $30.98 of iTunes gift card credit and changed the city/state to Towson, MD. I did have a credit card associated with my iTunes account, but lucky for me it was somehow removed from the account so no fraudulent CC charges occurred.

    Those gift cards were birthday presents... What soulless creature steals BIRTHDAY PRESENTS!!?!?! That's just as bad as punching Santa Claus in the face.

    An incredibly nice Apple customer support agent is helping me out now.
    MacBook Pro, Mac OS X (10.6.5)
  • Eagerbob Level 1 Level 1 (0 points)
    Currently Being Moderated
    Dec 22, 2010 3:17 PM (in response to stereocourier)
    add me to the list. While on holiday I got an email from Apple that the creditcard info on my iTunes account had changed. Could not respond since the wifi signal was poor/stopped working. When I came online again the next day `I received two mails with a purchase receipt for two apps each, totalling €27.46 , thus leaving €0,28 in my account. I do not have an IPhone nor iPad and I never bought an app. Luckily the creditcard I used for opening the account does not work anymore, so this was all they got.

    I contacted Apple and they responded very quickly. They closed the account and will refund the €27.46 the next days. So that is good.

    What is remarkable is that the purchase receipts show 3 out of the 4 apps to be developed by a certain "bin mao", the another one by "yu gao|1091937977". Certainly no coincidence.

    Looks like this could be a way to get the apps in the top-charts or to write positive reviews? Unfortunately after Apple blocked my account I could not write a review anymore, to let the punters know that this is a fraud that works through compromised accounts.

    If Apple wants to do anything about this theft they should go after the developers that use this fraud to get their apps rated. Apart from that I am very happy with the way Apple handed the situation, giving me a refund rightaway.
    MBP, Mac OS X (10.6.5)
1 2 3 ... 130 Previous Next


More Like This

  • Retrieving data ...

Bookmarked By (39)


  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.