saschneider wrote:
My 12 year old sons ID was hacked and all questions were changed and the email is not even an email we have ever owned. Basically Apple acts like this could never happen when it happens all the time from what I read. Luckily no credit cards were connected. Best part is that unless I can furnish a receipt from my phone from 2.5 years ago to show I own it then my son can not even use his phone because we can not change the apple ID without his original password. Its amazing that as of a month ago his password worked and then all of the sudden he kept getting verification notifications as if someone was trying to access his account and then his account was locked out. Apple needs to stand by their products and find ways to help customers who have been hacked, trying to get a receipt from Verizon is a nightmare and I am not purchasing a phone because their system is not as secure as they promise.
How your account is protected:
Standard Account
You provide an email address as your username, and optionally an alternate rescue email for extra security. Apple requires a password that has at least 8 characters including a number and a capital letter.
You provide your correct date of birth and 3 selected security questions and answers.
--- Should you forget your account password ---
You can visit https://iforgot.apple.com/
After which, you will be asked to provide the email account you setup on the account and either verify your date of birth you provided and your security questions, or send a password reset email to the email on that account. (If your email account has been accessed by someone else, they can follow these same steps to take possession of your account as they are using the same access as you use. The security of your email is yours to own. After they have updated the password, they can then make other changes to the account such as the email tethered to it.)
Two Factor Authentication or Two-step Verification
These are other, more advanced security options offered by Apple that can be setup through https://appleid.apple.com/
Two-factor authentication for Apple ID - Apple Support
Frequently asked questions about two-step verification for Apple ID - Apple Support
----
Sum of it is if someone were to learn the security information you use on any account, Apple or otherwise, being the answers to your questions, date of birth, email you use on your accounts...no one is going to be able to stop them from taking over an account that is setup with standard security measures, as they are essentially proving all means of ownership of that account by providing those details once they have learned them. Methods often used for this now are emails, text messages, and false/phishing weblinks designed to appear as though they are legitimate when they are not. They will ask for this type of information or may even be so bold as to ask you to "sign in" with your ID and password as though they are Apple themselves. Many people fall for stuff like this every day, and that is why more advanced security options are making their way into most online accounts. The two-step verification is something the majority of major email providers offer as a means of security.
Identifying fraudulent "phishing" email - Apple Support
http://www.apple.com/legal/more-resources/phishing/
Apple does not have any means or reason to know your SSN or Drivers License # and have that on file to identify you outside of the account information they ask you for when you sign up for an account, so again, if someone else collects your questions, date of birth, email you use on your accounts, Apple cannot help or "stand by their products" in this matter.