You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:43 PM

Reply
1,958 replies

Jul 1, 2011 10:48 PM in response to stereocourier

Hello again everyone. Good news in that it has only taken a couple of days to fix things up. But - obviously had to change my password in all things Apple. Money refunded to my itunes account. NO explanation as to how this happened and NO admission that the itunes store had been hacked! NO comment to my question about the security of my own personal details, including credit card which had been deleted. All I received was just two standard e-mails that virtually accused me of being at fault. Oh well, no credit card details will ever be left with Apple again and I shall go back to buying CDs!

Good luck to everyone else who has experienced this same problem - hope you get your money back!

Cheers,

John

Jul 2, 2011 2:54 AM in response to stereocourier

I got hacked as well, yesterday and today!


I had £29.41 left in my account after buying Streetfighter IV: Volt on Thursday when it was on special offer and when I checked my email a couple of hours ago, I found that there were some unauthorized purchases for Kingdom Conquest which I knew I had definitely NOT bought as these were done while I was asleep and at the time, I was downloading video podcasts from iTunesU while asleep!


Thanks to whoever had done this, I only have 54p left from £30 worth of giftcards which I had bought a couple of weeks ago.


How do I go about arranging a refund from iTunes?

Jul 2, 2011 10:58 PM in response to lorifromharrisburg

I changed my password as soon as I could and I've already changed my security detals except my Apple ID as I don't know how to do that.


I had to go to the Apple Store in Liverpool to get assistance on how to contact Apple Customer Support which I've done via the UK site, so I'm waiting to hear from them.


You swear Apple are more concerned with protecting their reputation than helping their own customers.


Oh well, I wonder how they'll feel when they get a lot of bad publicity when this story gets out to the wider media...

Jul 3, 2011 9:22 AM in response to stereocourier

Add me to the list of hacked accounts,


for the past two weeks I have been getting frequent e-mails from apple saying my account has been blocked because of multiple password attempts. I updated my password to a completely random series of numbers, letters and special characters that was 8 characters long but that was not enough.


The hackers drained my gift card with in-app purchases from -KindomConquest- in total $8.99 as I only had $10 in credit remaining. Its annoying to say the least my password was a strong password and it was still defeated. Since there are so many other posts on here I am now starting to think that there is a flaw that Apple has not fixed that is allowing hackers to compromise so many accounts.


I e-mailed Apple about the purchases hopefully they do the right thing and refund the purchase. I believe Apple is aware of this problem because they removed the credit card I had associated with my account. However now I am concerned about using that account any more or any account tied to Apple because my password was complex and it was still hacked.

Jul 4, 2011 9:02 AM in response to stereocourier

One way around this problem I started using is if your credit card company uses a VAN or virtual account number.


CitiCards lets you set up temporary credit card account numbers linked to your real account. You can set up an expiration date and maximum amount of money that can be charged. I now have a 99 cent credit card stored on iTunes. When I plan on buying something I'll go to Citi, up the amount to what I want to spend, and then make the purchase, being sure that $1 or so remains on the card. Apple (or any hacker) only sees the virtual account number, and never gets back to your original number.


I would have preferred the amount to be less than 99 cents, but thats what happened after taxes... oh well.

Jul 4, 2011 5:30 PM in response to stereocourier

I have not been hacked, but after readiing about this ridiculous situation I did log in to my iTunes account and delete my credit card information. I mostly download free apps and free kindle books, and can enter CC info temporarily the rare times I do buy something. Also, in light of Apple's blatant refusal to step up and either explain what is happening or take the blame for this, I will never buy another song from iTunes unless it is unavailable elsewhere. Amazon has a very good selection at better prices and so far no sales tax.

Jul 4, 2011 7:08 PM in response to edstreiff

Apple was quick to refund the fraudulent purchases so chears to them however 15 minutes after they refunded my account it was drained again with the same -KingdomConquest- in-app purchase. Apple support said they disabled my account which must have been a lie plus I changed my password to a 12 character random password with Capital Letters, Special Characters, and Numbers in a random order and still this happened which makes me think its not a password issue at all but rather an issue with their system that they are taking advantage of


APPLE FIX THIS!!!!!

Jul 5, 2011 4:19 PM in response to stereocourier

I received a $15 gift card purchased from a local drug store as an anniversary gift on June 10th, 2011. On June 14th I attempted to redeem my gift. I was unable to log in so attempted to retrieve instructions on how to reset my password via my email account. I never got an email. I tried having it sent to a different email account. I never got an email. I checked to see if my AppleID existed and was advised it did not. I have been using the same account information since 2004. So I tried to make a new account using the same information I had been using thinking it would get kicked back if that account already existed. It let me sign up using ALL of the same information I have been using for years. I attempted to redeem my gift card, but it told me it had already been used. I wrote to support. THREE days later I received a response that someone who had the user name beginning with 'super' had redeemed the card on the 11th (the day after my husband purchased it, but before I scratched off the redemption code). They could not give me any more further information and they are sorry they couldn't help!!?? I replied that this was unacceptable and scanned the images of the back of the gift card along with the receipt of purchase. THREE MORE days later I received an email apologizing, but asking if I could rescan the front and the back of the card along with the receipt at a higher quality (than PDF? ever hear of zoom?) I took them to my husband's architectural office and used their high resolution scanner and sent them back today. I still haven't gotten any kind of refund and it's only $15!!! I just wanted the Adele album. 😟 For my 11th wedding anniversary 😟 For the 10 hour car trip 😟 'Super' and Apple can bite me, but I want compensation.

Jul 6, 2011 6:55 PM in response to stereocourier

Have not used iTunes in two months, have not even had my iPad on during that time. This morning had an email saying I had changed my account info, so I logged in. At the time of login, my balance was about 1/3 of what I had previously had for gift cards, which I had been saving and adding to for years. Changed the password. Literally watched my balance disappear after changing the password, while frantically clicking the link on each purchase to "report a problem" which just brought me to a generic contact us page with a variety of topics. In the space of a few minutes, I went from hundreds of dollars of gift card money to $3.78. During that time, I not only changed the password, but corrected the address, changed the reset question, and changed my email and login id. Sent numerous emails to Apple, as of yet, not response. Texas Hold 'em and chips are the purchase in this case, which I obviously did not make. I am in IT, and am supremely careful with my user names and passwords as a result, but was not aware of the history on this problem since I do not allow Apple products in our organization. Since I made no recent purchases, no recent downloads, no recent anything (even the gift cards ranged from probably 1 to 5 years old), I am baffled as to how this came to occur to me and so many others. As Murphy would have it, I got nailed worse than the majority as well...

Jul 7, 2011 8:59 PM in response to stereocourier

This just happened to me as well. I rarely make purchases on iTunes, maybe once a week, and only for small amounts. However, when I checked my bank statement Monday I found several large purchases. I logged into my purchase history on iTunes and found numerous purchases specifically "purchased as a gift for livemore4@qq.com. I used some software to search for the account user and was lead to a company profile in China, similar to our version of AOL. Among the purchases were Plants vs. Zombies, Street Fighter, Fish Odyssey, Pool Bar, TomTom US & Canada, and Scream 2. The purchases totaled $168.49. I've written tech support and all they've said at this point is to change my account info and cancel my card associated with the account, but they have not mentioned anything about a refund. Also, they claimed that it was somehow my fault because I must have accidentally filled out a false Apple, Inc. document. My questions is, if my account is only linked to my computer then how is it that Apple can allow someone in China make purchases using my information. I'm glad some of u have gotten a resolution, I'm hoping mine will come soon.

iTunes store account hacked

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.