How do I know if my MacBook Pro is crompromised?

I got a notice from my backup program that someone tried to sign in to that program from something that wasn't my computer in a neighboring town. What now? How can I find out if my computer has been hacked? (I will change my password on my backup.)


[Re-Titled By Moderator]

MacBook Pro 13″, macOS 12.7

Posted on Feb 27, 2025 6:55 PM

Reply
Question marked as Top-ranking reply

Posted on Feb 27, 2025 8:05 PM

msboc wrote:

Carbonite sent me the message.


I don’t expect your Mac was hacked here. I suspect a source of confusion — a misfeature — of Carbonite itself.


Geolocating IP addresses is best assumed to be accurate within the same country.


Better geolocation accuracy costs the ISPs more money, and providing that better accuracy puts people at risk.


Which means IP addresses routinely geolocate tens or hundreds of kilometers away from the user. Or more.


If the reported login happened around the same time as one of your logins or other activity of yours, you’re likely just fine as the login was from you.


If the login does not match a time when you accessed the Carbonite service, you will want to take whatever steps Carbonite recommends to re-secure your login on their service. That may well involve two-factor authentication or passkeys, or whatever Carbonite uses.


TL;DR: Contact Carbonite Support for concerns or issues with messages generated by Carbonite. (Here assuming the message itself isn’t spoofed, too.)



3 replies
Question marked as Top-ranking reply

Feb 27, 2025 8:05 PM in response to msboc

msboc wrote:

Carbonite sent me the message.


I don’t expect your Mac was hacked here. I suspect a source of confusion — a misfeature — of Carbonite itself.


Geolocating IP addresses is best assumed to be accurate within the same country.


Better geolocation accuracy costs the ISPs more money, and providing that better accuracy puts people at risk.


Which means IP addresses routinely geolocate tens or hundreds of kilometers away from the user. Or more.


If the reported login happened around the same time as one of your logins or other activity of yours, you’re likely just fine as the login was from you.


If the login does not match a time when you accessed the Carbonite service, you will want to take whatever steps Carbonite recommends to re-secure your login on their service. That may well involve two-factor authentication or passkeys, or whatever Carbonite uses.


TL;DR: Contact Carbonite Support for concerns or issues with messages generated by Carbonite. (Here assuming the message itself isn’t spoofed, too.)



Feb 27, 2025 7:02 PM in response to msboc

"How do I know if my MacBook Pro is crompromised?: I got a notice from my backup program that someone tried to sign in to that program from something that wasn't my computer in a neighboring town. What now? How can I find out if my computer has been hacked? (I will change my password on my backup.)"

-------


Hacked Mac:

No one hacked your Mac. What's this backup app that you use? Are you looking at the backup created history on it?


Secure your Info:

If concerned for device access, then don't stare your login info, (A.) verify your devices, and (B.)secure your account:


A. Verify your Devices:

Verify that all devices are logged in to your account, by using this link: Check your Apple ID Device List to See where you're Signed in - Apple Support


then...

B. Modify your Credentials:

Having been stollen, someone lily has your credentials. So, by all means, modifying them.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How do I know if my MacBook Pro is crompromised?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.