Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:43 PM

Reply
1,958 replies

Jan 15, 2014 6:23 AM in response to MadMacs0

MadMacs0 wrote:

If you have been using the same AppleID for all your Apple accounts and you feel a password has been compromised, then it would be a good idea to change them all to different password

If you have been using the "same AppleID for all your Apple accounts", then you have only one account & only need to change you password (singular). You don't need to "change them all".

In fact, the only place to change your password is -> https://appleid.apple.com/

This changes it for iCloud, iTunes, Apple Store, Apple forums, whatever.

Jan 15, 2014 6:27 AM in response to Smr127

Smr127 wrote:


Sorry. It's the iTunes Store. I thought they were all linked.

They are the same.

AppleID = iTunesID = iCloudID. Same password. You cannot change yoru AppleID password to something different than you iTunesID password.


Unless you are constantly logging in and out with different AppleIDs and passwords, you have only one account.

Jan 21, 2014 5:13 AM in response to Chris CA

Just adding to the comments on this forum, cause i'm not happy with the answer i got from Itunes support! my itunes account has been hacked with fradulent purchase made. i only have access to my account from my ipad which is kept at home and not accessed by anyone other than me. apple have made out the refunded it as a favour! clearly their systems are insecure, i have a decent password, as i work in IT. this is really poor! so much for apple security over windows!

Jan 28, 2014 8:08 AM in response to stereocourier

Yep, add me to this ridiculous list of accounts that have been hacked!! I am so angry. Did you know that if you have backed up your device recently, the hacker can DOWNLOAD EVERY SINGLE MOTHER$#%&*ING email, imessage, contact, photo and god knows what else, onto an alternate device. I wish someone cared. Apple does not. Unless they are served with a court writ they tell me.


Oh and BTW, i tracked the hacker down. he left a dirty digital trail. really really want to call his mother in law to let her know the juice.


Anyway so my QUESTION is: my apple ID was disabled and i am wanting to know if there is any way i can get back the content from it. ive actually been able to "set up a new apple id" using the old one. (i cant verify it tho, as it was an invalid address......)


is it possible? I had a bazillion purchases, private audio memos, books etc - all GONE. would it be wrong of me to log 4,000 chargebacks for those purchases?

Jan 28, 2014 9:32 AM in response to What a Bugger

What a Bugger wrote:


Oh and BTW, i tracked the hacker down. he left a dirty digital trail. really really want to call his mother in law to let her know the juice.

Call his mother-in-law? Wow, you are really going over the top with this...


Seriously?


Why haven't you called the cops and possibly a lawyer?



What a Bugger wrote:


Yep, add me to this ridiculous list of accounts that have been hacked!! I am so angry. Did you know that if you have backed up your device recently, the hacker can DOWNLOAD EVERY SINGLE MOTHER$#%&*ING email, imessage, contact, photo and god knows what else, onto an alternate device.

How are they going to download all this info? Do they have access to your computer?



the hacker can DOWNLOAD EVERY SINGLE MOTHER$#%&*ING email,

Why do you bother to keep "EVERY SINGLE MOTHER$#%&*ING email"?

Don't you mark these as SPAM and delete them?

Jan 31, 2014 5:35 PM in response to stereocourier

Thanks to this thread, I've decided to both enable two factor authentication and NOT store a credit card or any other payment method with Apple. I had been storing my card but after all the stories of people's accounts being hacked and Apple's lack of response or caring, I've decided that they can't be trusted with securing data. Like Target and other companies lazy about security, it's going to take a HUGE payout by Apple before they do something about it.


Sadly, now I will need to enter my card for each purchase and likely immediately delete it again, as I imagine Apple will store it each time I use it. I may do like others and purchase gift cards from the local Apple store using cash to pay for them. I'm not sure I want to trust my card to their stores.


Anyway, thank you everyone for posting your stories and, in essence, being a warning to others to not trust Apple's security.

Feb 1, 2014 12:42 AM in response to Jordan klein

Hi All


I received a Spam email to my one address purportedly from Apple about my iCloud account being accessed from an unauthorised computer. This flagged with me straight away and has been forwarded to Apple "Spam" address.


As my OCD attitude to security, this raised the "Spam" flag right away. Remember people, it is not always a bad Apple employee that has the ability to pass on information, you have to be a bit more tuned on to the methods that spammers get your information. I know with my regime that if my iTunes account is hacked then they get specific "unique" information only stored with Apple. My email/website accounts have completely different passwords that get them nowhere.


Jordan, you can purchase several gift cards and redeem them as you require - I do. In the UK it is even better when stores do an offer (Currys the electrical retailer did just before Xmas with £25 for £20).


Remember the hackers want access to your details in order to facilitate spending money/transferring money for financial gain.

Feb 1, 2014 12:51 AM in response to Mark Williams1900

Mark Williams1900 wrote:


I received a Spam email to my one address purportedly from Apple about my iCloud account being accessed from an unauthorised computer.

You make valid points here, but I'll just add that Apple does send e-mails to users when it suspects a fraudulent transaction has occurred. They should simply ask you to log into your account without giving you a link to do so.


On the other hand, there have been many many such fake e-mails sent out in an attempt to harvest your userID and password. Those normally give you a clickable link which takes you to a page that looks identical to an Apple site asking you for your credentials. If you do that then almost immediately the badguys will log into your account, take whatever they need, often making temporary changes to your account, then restore it hoping you won't notice and move on to their next victim.


Best bet is to never click a link in any such e-mail. Type the correct URL into your browser, log in and check to make sure everything is OK.

Apr 2, 2014 12:29 PM in response to stereocourier

I recently changed my credit card details in iTunes and have subsequently had fraudulent charges to the credit card added to iTunes. It appears that whoever is behind this is tracking changes. Thankfully my credit card provider is on to this and has reversed all charges as I had never purchased from iTunes on this card let alone the additional transactions to other online stores that have been charged.


It is ridiculous that this has been ongoing since 2010 and Apple have not fixed the leaks. As a result I do not have any credit card details stored in iTunes nor will I buy anything from iTunes again, let alone any other Apple product due to the response I had from Apple Support in Australia last year - 2 strikes and I'm gone.

Apr 12, 2014 6:33 PM in response to Chris CA

What is with the Apple cheerleaders making excuses for Apple's complete failure to address all of these fraudulent downloads? It just happened to my account, and I wasn't using a credit card, so lay off the "blame the credit card companies." And to the guy who didn't get hacked, I guess you got lucky. Plenty of other people weren't so lucky. Complaints all over the internet over the past several months. My husband's account was hacked recently as well. The Apple "support" acknowledged the downloads appeared to originate from somewhere else. Well, how about handling it? I didn't make the purchase, so I can't track it back. Apple can. Get it together, Apple. There are too many complaints from too many people to excuse Apple just passing the buck to credit card companies or acting as if this is some random, unusual occurrence. They should be able to track the transactions and identify where download requests on all of these transactions occurred. If I'm in the U.S., and the request came from China, guess what, it wasn't my authorized purchase. This isn't rocket science.

Apr 12, 2014 6:41 PM in response to BlueSimone

BlueSimone wrote:


What is with the Apple cheerleaders making excuses for Apple's complete failure to address all of these fraudulent downloads?

No idea.

I wasn't using a credit card

Then how is it Apple's fault (since your CC was not in iTunes?

f I'm in the U.S., and the request came from China, guess what, it wasn't my authorized purchase.

It was authorized by your CC company else it wouldn't have gone through because it was not authorized by your CC company.

That's how it works. It's not rocket science.

iTunes store account hacked

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.