Has our iPad been hacked?

Has our iPad been hacked?

My wife was using her iPad 10TH GEN (Version iPadOS 26.2) to look at photos on Messenger, when suddenly a window popped up saying she needed to pay a subscription to continue. It looked like a "game" of some sort. Then the screen went a light blue grey with "hello" in many languages flashing on it, and the "game" screen superimposed. We couldn't swipe back to a normal screen. We powered down and hoped that would reset things.

However when we restarted this morning the "hello" screen reappeared.



If we swipe up the bar at the bottom, we get a Passcode entry screen that seems subtly different from normal.


We are wondering:

Is it safe to enter the passcode?

Has the iPad been hacked?

If so what do we do?

if not, how do we restore things to normal?


We bought the iPad in 2023, and have never changed the lock screen.

Windows, Windows 10

Posted on Jan 19, 2026 2:37 PM

Reply
Question marked as Top-ranking reply

Posted on Feb 16, 2026 5:56 AM

Dickl1 wrote:

Thank you for the recommendation and the link. After I charged the iPad, the Restart worked. I still got the Hello screen, but when I entered the passcode, I got a message about software update loading, and then "Update Completed, IOS 26.2" and messages about the features of IOS26.2
So it was just a Software Update running, but it seemed to do so in an intrusive way.
All now seems to be running normally. Thanks for your help. It was relief to know we hadn't been hacked.


Presumably, prior to this update, your iPad was running iPadOS 18.x. After a major version update, seeing the multilingual "hello" page is entirely normal - as is the prompt to enter your device Passcode.


Be aware that iPadOS 26.3 is current. If you haven't already done so, you should install this update - as it includes both functional fixes and essential security updates for your iPad.

Similar questions

4 replies
Question marked as Top-ranking reply

Feb 16, 2026 5:56 AM in response to Dickl1

Dickl1 wrote:

Thank you for the recommendation and the link. After I charged the iPad, the Restart worked. I still got the Hello screen, but when I entered the passcode, I got a message about software update loading, and then "Update Completed, IOS 26.2" and messages about the features of IOS26.2
So it was just a Software Update running, but it seemed to do so in an intrusive way.
All now seems to be running normally. Thanks for your help. It was relief to know we hadn't been hacked.


Presumably, prior to this update, your iPad was running iPadOS 18.x. After a major version update, seeing the multilingual "hello" page is entirely normal - as is the prompt to enter your device Passcode.


Be aware that iPadOS 26.3 is current. If you haven't already done so, you should install this update - as it includes both functional fixes and essential security updates for your iPad.

Jan 19, 2026 6:05 PM in response to MrHoffman

Thank you for the recommendation and the link. After I charged the iPad, the Restart worked. I still got the Hello screen, but when I entered the passcode, I got a message about software update loading, and then "Update Completed, IOS 26.2" and messages about the features of IOS26.2

So it was just a Software Update running, but it seemed to do so in an intrusive way.

All now seems to be running normally. Thanks for your help. It was relief to know we hadn't been hacked.

Jan 19, 2026 3:31 PM in response to Dickl1

As documented by Apple in its Security Guide, for devices with TouchID or FaceID enabled, you device Passcode is reportedly required in the following circumstances…


A passcode or password is also required if the device is in any of the following states:

The device has just been turned on or restarted

• The user has logged out of their Mac account (or hasn’t yet logged in).

• The user hasn’t unlocked their device for more than 48 hours.

• The user hasn’t used their passcode or password to unlock their device for 156 hours (six and a half days), and the user hasn’t used a biometric to unlock their device in

4 hours.

• The device has received a remote lock command

The user exited power off / Emergency SOS by pressing and holding either volume button and the Sleep/Wake button simultaneously for 2 seconds and then pressing Cancel.

• There were five unsuccessful biometric match attempts (though for usability, the device might offer entering a passcode or password instead of using biometrics after a smaller number of failures).

When Face ID with a mask is enabled on an iPhone, it’s available for the next 6.5 hours after one of the following user actions:

• Successful Face ID match attempt (with or without a mask)

• Device passcode validation

• Device unlock with Apple Watch

Any of these actions extends the period by an additional 6.5 hours when performed.



This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Has our iPad been hacked?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.