Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:43 PM

Reply
1,958 replies

Apr 26, 2012 5:59 AM in response to transmogrification

transmogrification wrote:


This is really helpful to the forum of "iTunes store account hacked". Never once did you reference yourself as a victim, yet you chose to speak for all victims, while attacking another forum poster who has posted helpful comments.

https://discussions.apple.com/thread/2665383?answerId=17986833022#17986833022, for a start. It's a summary of the thread so far and some suggestions for anyone else who is a victim.


I must have missed Carlo's helpful post - please post a link. The only ones I've seen either insinuate that our PCs are hacked or say the problem is nothing to do with Apple. Most of his earlier posts suggest people contact their CC companies, which is BAD advice. Only recently does he suggest how to contact Apple.


As for your attack on Linj, he has every right to expect a speedier and better response from Apple. Who are you to tell him to wait 24/48 hours by following the "Contact Us" link? This is a victim of fraud here and he wants answers! He is also a paying customer to what is apparently the biggest company in the world and he does NOT expect to be told they "have no resources". In your responses (18222977 & 18223039), you and Carlo are simply rude - I don't understand why.


However, I'd like to take this discussion away from this thread (don't want to go offtopic).


<Email Edited by Host>

May 16, 2012 4:23 PM in response to JJinBrisbane

JJinBrisbane wrote:


...and again from Down Under. You made me smile and that's a good thing. Yes, I too have eleventy billion other accounts which have never been hacked...just my very first visit to the App Store (where I only registered - didn't buy anything).


I have a little mantra which stands me in good stead...'it always good to have someone to blame' And you know what, in this case I'm blaming Apple. I didn't do anything different from what I might have done in using a PC for the past many, many years.


I am disappointed when people assume that there are so many of us out there who are dummies and don't know/understand anything...and they do. It must be hard to be humble when you are perfect in every way!!!


Hasn't happened as a PC user. Why now? Apple must have some big holes in security...that's all I can think from my lowly, former PC perch

Because it hasn't happened before to you as a PC user, doesn't mean anything. There is always a first time. Malware and phishing scams are getting more sophisticated for all computer users. Blaming Apple, just to blame someone doesn't help the situation, mantra or not. If you are a victim of a scam, and are looking to resolve the issue with a refund, you can contact Apple. http://www.apple.com/contact/ I hope this helps.

May 17, 2012 2:19 PM in response to Smoothvirus

Smoothvirus wrote:


Yes, I read that link earlier. But that's an article about Windows Defender, and what I used was Windows Defender Offline, which is a different product. Sorry if I sounded a little frustrated earlier. No messenger shooting intended. 🙂


Anyhow I will test it out with malwarebytes and clamav later tonight and post the results.

Please remember, this discussion is the iTunes for Mac Community and most people coming here are Mac users. iTunes for Windows is probably where you might find more relevent help for your issues. I hope that helps or you can post your issues and situation there.

May 22, 2012 7:59 AM in response to CVA2

At the bottom right of this page is a link "Contact Us".


http://www.apple.com/contact/


This linked page includes phone contact support as well as email for your convenience, as well as information about "Fast Lane" customer support. Many people here have reported success and resolution for issues with their accounts. here I hope this helps you.

Jun 12, 2012 7:58 AM in response to aircool

Aircool, please learn how to read these forums and their threads. My reply wasn't to you it was to:


https://discussions.apple.com/thread/2665383?answerId=18580466022#18580466022


I see that this post is your only post ever made in Apple User Forums. Since this is a community supported help site, maybe you would care to contribute and share your experience with your iTunes account being compromised. The community here might be able to give you helpful advice or steer you in a helpful direction.


Being helpful serves everyone. Being disruptive serves no one.

Jun 17, 2012 6:02 PM in response to ValWheeler

ValWheeler wrote:


Contacting apple is darn near impossible.

Actuall, it is very simple.

Click Contact us at the bottom right of every page on Apple.com.

Click on Support at the top of this (and most other pages) and select the topic you want help with.

For iTunes, go here -> http://www.apple.com/support/itunes/contact/

or here -> http://www.apple.com/emea/support/itunes/contact.html

Jun 18, 2012 1:59 PM in response to 9837440

Hacking worm holes in iTunes

http://www.cnn.com/2012/02/07/tech/apple-itunes-hacking


"

There are already 71 web pages of complaints on just one customer forum, and it's growing.

For more than a year, iTunes users have been reporting on online Apple customer forums that their accounts have been hacked, their gift cards spent, their PayPal accounts used or their store credit exhausted.

Jun 18, 2012 4:18 PM in response to 9837440

Dear Meh,


Welcome to iTunes Store Customer Support. My name is Nirajit. I will be handling your issue from here onwards to make sure that your issue gets resolved at the earliest.


TRANSLATION TO ENGLISH: "I will do nothing"


I understand that you would like to know about XXXXXXX. I realize the importance of your concern and I am glad to provide you the necessary information.


TRANSLATION TO ENGLISH: "You will never get resolution on this issue"


XXXXXXX, I'm sorry but the iTunes Store does not provide any account information—including account activity and personal information—without a subpoena. We do this for your protection.


TRANSLATION TO ENGLISH: "We do this for our own protection"


You may access certain account information by signing in to the iTunes Store and choosing View My Account from the Store menu at the top. You will need to log in with your Apple ID and password. If you no longer have the password, click the button that says "Forgot Password?"


If you need further assistance regarding this issue, please contact your legal advisor, who may contact Apple's litigation department http://www.apple.com/legal/contacts.html on your behalf.


TRANSLATION TO ENGLISH: "Talk to our lawyers"



Thank you for your understanding and for being a valued iTunes Store customer.


TRANSLATION TO ENGLISH: "Shut up and take it"


Have a wonderful day!


TRANSLATION TO ENGLISH: "How do you like my use of sarcasm?"


Sincerely,


Nirajit

iTunes Store/Mac App Store Customer Support

Jun 18, 2012 5:16 PM in response to sinatrix

sinatrix, one does not need your idle computer to access your iTunes account. Your iTunes account can be accessed from the iTunes store as well as the App Store and iBooks on your iPhone. One of my concerns for any smartphone with Wi-Fi connectivity, is the ability to connect to any open Wi-Fi hotspot. I am not doubting your mindfulness, though one can never remind people about Internet security and the dangers of leaving Wi-Fi turned on and set to auto connect to available hotspots.


Have you contacted Apple about your iTunes account?


http://www.apple.com/contact/


You can always schedule a visit with your nearest Apple store in person for more assistance with your Apple product or service.

Sep 14, 2012 2:22 AM in response to Michellw

Michellw wrote:


How do you contact Apple??

As dozens of users have said here previously you need to use expresslane services (but with 117 pages I can't really blame you for not knowing that).


Start here http://www.apple.com/support/itunes/contact/

Click on Contact iTunes Store Support

It should go to the iTunes page

Click on Account Management

Click on iTunes Store account security

iTunes store account hacked

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.