You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

📰 Newsroom Update

Billie Eilish is Apple Music’s Artist of the Year for 2024. Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:43 PM

Reply
1,958 replies

May 16, 2012 4:23 PM in response to JJinBrisbane

JJinBrisbane wrote:


...and again from Down Under. You made me smile and that's a good thing. Yes, I too have eleventy billion other accounts which have never been hacked...just my very first visit to the App Store (where I only registered - didn't buy anything).


I have a little mantra which stands me in good stead...'it always good to have someone to blame' And you know what, in this case I'm blaming Apple. I didn't do anything different from what I might have done in using a PC for the past many, many years.


I am disappointed when people assume that there are so many of us out there who are dummies and don't know/understand anything...and they do. It must be hard to be humble when you are perfect in every way!!!


Hasn't happened as a PC user. Why now? Apple must have some big holes in security...that's all I can think from my lowly, former PC perch

Because it hasn't happened before to you as a PC user, doesn't mean anything. There is always a first time. Malware and phishing scams are getting more sophisticated for all computer users. Blaming Apple, just to blame someone doesn't help the situation, mantra or not. If you are a victim of a scam, and are looking to resolve the issue with a refund, you can contact Apple. http://www.apple.com/contact/ I hope this helps.

May 17, 2012 2:19 PM in response to Smoothvirus

Smoothvirus wrote:


Yes, I read that link earlier. But that's an article about Windows Defender, and what I used was Windows Defender Offline, which is a different product. Sorry if I sounded a little frustrated earlier. No messenger shooting intended. 🙂


Anyhow I will test it out with malwarebytes and clamav later tonight and post the results.

Please remember, this discussion is the iTunes for Mac Community and most people coming here are Mac users. iTunes for Windows is probably where you might find more relevent help for your issues. I hope that helps or you can post your issues and situation there.

May 22, 2012 7:59 AM in response to CVA2

At the bottom right of this page is a link "Contact Us".


http://www.apple.com/contact/


This linked page includes phone contact support as well as email for your convenience, as well as information about "Fast Lane" customer support. Many people here have reported success and resolution for issues with their accounts. here I hope this helps you.

Jun 12, 2012 7:58 AM in response to aircool

Aircool, please learn how to read these forums and their threads. My reply wasn't to you it was to:


https://discussions.apple.com/thread/2665383?answerId=18580466022#18580466022


I see that this post is your only post ever made in Apple User Forums. Since this is a community supported help site, maybe you would care to contribute and share your experience with your iTunes account being compromised. The community here might be able to give you helpful advice or steer you in a helpful direction.


Being helpful serves everyone. Being disruptive serves no one.

Jun 17, 2012 6:02 PM in response to ValWheeler

ValWheeler wrote:


Contacting apple is darn near impossible.

Actuall, it is very simple.

Click Contact us at the bottom right of every page on Apple.com.

Click on Support at the top of this (and most other pages) and select the topic you want help with.

For iTunes, go here -> http://www.apple.com/support/itunes/contact/

or here -> http://www.apple.com/emea/support/itunes/contact.html

Jun 18, 2012 1:59 PM in response to 9837440

Hacking worm holes in iTunes

http://www.cnn.com/2012/02/07/tech/apple-itunes-hacking


"

There are already 71 web pages of complaints on just one customer forum, and it's growing.

For more than a year, iTunes users have been reporting on online Apple customer forums that their accounts have been hacked, their gift cards spent, their PayPal accounts used or their store credit exhausted.

Jun 18, 2012 4:18 PM in response to 9837440

Dear Meh,


Welcome to iTunes Store Customer Support. My name is Nirajit. I will be handling your issue from here onwards to make sure that your issue gets resolved at the earliest.


TRANSLATION TO ENGLISH: "I will do nothing"


I understand that you would like to know about XXXXXXX. I realize the importance of your concern and I am glad to provide you the necessary information.


TRANSLATION TO ENGLISH: "You will never get resolution on this issue"


XXXXXXX, I'm sorry but the iTunes Store does not provide any account information—including account activity and personal information—without a subpoena. We do this for your protection.


TRANSLATION TO ENGLISH: "We do this for our own protection"


You may access certain account information by signing in to the iTunes Store and choosing View My Account from the Store menu at the top. You will need to log in with your Apple ID and password. If you no longer have the password, click the button that says "Forgot Password?"


If you need further assistance regarding this issue, please contact your legal advisor, who may contact Apple's litigation department http://www.apple.com/legal/contacts.html on your behalf.


TRANSLATION TO ENGLISH: "Talk to our lawyers"



Thank you for your understanding and for being a valued iTunes Store customer.


TRANSLATION TO ENGLISH: "Shut up and take it"


Have a wonderful day!


TRANSLATION TO ENGLISH: "How do you like my use of sarcasm?"


Sincerely,


Nirajit

iTunes Store/Mac App Store Customer Support

Jun 18, 2012 5:16 PM in response to sinatrix

sinatrix, one does not need your idle computer to access your iTunes account. Your iTunes account can be accessed from the iTunes store as well as the App Store and iBooks on your iPhone. One of my concerns for any smartphone with Wi-Fi connectivity, is the ability to connect to any open Wi-Fi hotspot. I am not doubting your mindfulness, though one can never remind people about Internet security and the dangers of leaving Wi-Fi turned on and set to auto connect to available hotspots.


Have you contacted Apple about your iTunes account?


http://www.apple.com/contact/


You can always schedule a visit with your nearest Apple store in person for more assistance with your Apple product or service.

Sep 14, 2012 2:22 AM in response to Michellw

Michellw wrote:


How do you contact Apple??

As dozens of users have said here previously you need to use expresslane services (but with 117 pages I can't really blame you for not knowing that).


Start here http://www.apple.com/support/itunes/contact/

Click on Contact iTunes Store Support

It should go to the iTunes page

Click on Account Management

Click on iTunes Store account security

Sep 22, 2012 12:23 PM in response to ekcd

This is a user-to-user forum. To make sure that Apple sees your feedback, use the appropriate link on this page:

http://www.apple.com/feedback/

ekcd wrote:


Update:


Haypi has contacted many of the players of their games that have been using the credit card fraud sites that have been charging your credit cards to make iTunes purchases and reselling them to game players. Haypi notified the players in question and have them 3 days to PAY HAYPI THE AMOUNTS THAT APPLE/ITUNES CHARGED THEM BACK OVER THE FRADULANT CHARGES OR BE BANNED FROM THE GAME. That's it. After having stolen from you if the end user pays Haypi all is forgiven.


I am very disappointed in Apple as a result of their indifference to this issue. It's impossible to foresee and guard against all criminal acts but its a form of collusion when you are given a chance to end or limit the fraud and you do nothing. To this day no one from Apple has returned my emails or phone calls or accepted the information I have offered them as to who is doing this, how they are doing it and how they turn a profit from it.


Ugh, I want to respect Apple but they don't want to act in a respectable way.

iTunes store account hacked

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.