Q: iTunes store account hacked

That's exactly why I didn't change anything on my iTunes accoutn after the first hack (wel, that and I wasn't sure the first one was a true iTunes charge as they don't even show in my iTunes purchase list). Now, after this second hack, I may have proven that the two may be linked and I am curious to see if anyone else is in the exact same boat as myself.

My account has also been hacked.  I am very careful and so very shocked that this has happened and that Apple do not seem to be taking this seriously.   Very concerned that my personal data available to Apple has been compromised.  Noticed that there is an article on the Huffington Post at http://www.huffingtonpost.com/2012/02/10/itunes-hack-unauthorized-charges-apple_ n_1268593.html.  Feel that this should be investigated seriously by Apple.

Yet another victum here.  I had unlinked my Paypal account but still someone was able to charge $21.94 For HaypiDragon Coins.  Luckily, I realized it in time and unlinked Paypal yet again.  The hacker continued to try to purchase more HaypiDragon Coins totaling 39.47.  Apple Store shows that the payment didn't go through and I now OWE then the $39.47 !  I can't add a funding source now because when I do they will charge that.  There is NO option to cancel these transactions either.  I was not Phished!!  Someone working at Apple or a very good hacker has managed to get into the Apple Store's computers.  I can not get anyone to help me on the phone whatsoever.  ALL I can do is send emails and wait.  VERY frustrating and I will probably Never trust the Apple Store ever again.

j_romeo-  This same exact thing happened to me.  HaypiDragon Coins were purchased on my account using PayPal.  I didn't catch it in time to remove my PayPal account, but it had still showed that there was an error in processing and wanted me to update my payment information.  Lucky for me!  Here's what I did.  I went through the online express lane and did an online chat.  The issue was resolved this way.  The charges still appeared on my iTunes account history, but nothing came out of my PayPal account.  I've made purchases since and everytime I've completed my purchase, I remove my credit card.  I have never been charged for the HaypiDragon in-app purchase.  I suggest you log on and get someone to help via online chat.  From now on, whenever I make a purchase, I remove my payment information ASAP.  I'm one of the lucky ones that caught this before it actually affected my finances. 

Thanks, In defense of Apple I recieved an email already from support.  I will come back on here and let everyone know if they resolved my issues and refunded me.  Crazy thing is I had disabled Paypal as a payment option because my iPod has been broken.  I even took out the paypal email account that I use to use for payments from Paypal.  I do not know how they managed to charge anything to my Paypal unless they somehow accessed Apple computer records.  If the iTunes Store would make a faster way of contacting them of unauthroized transactions maybe they could track down the culprits.  I caught them the VERY second they were trying to make more purchases but I spent a couple hours trying to get ahold of the apple Store.   Crazy!  I don't only want my money back I want these people prosecuted!

Apple Customer Support was very helpful -- I had a reply within minutes of my email (they had to disable then reenable my account), and the $55 credit back to my account happened sometime overnight, as it was there this morning.

I deauthorized all of my iTunes machines and have since reauthorized one. I used a custom security question before the hack, and a unique to iTunes password. I created a new custom security question again. The new password is also more than 17 characters made up of several words and/or phrases, mixed case, numbers, special characters, the whole works. I have always used a unique long password with mixed case/characters anyway though -- I'd love to know how I got hacked in the first place.

If Apple is able to send me an email notifying me of a purchase from an UNAUTHORIZED device, shouldn't they be capable of stopping that purchase from any unauthorized device? Even a simple "confirm via email link" would have prevented this. I'd love to see some changes in regards to allowing purchases from unauthorized devices.

Today I had an unauthorized attempt to purchase from the Apple store.  It appears that it was linked between my credit card and Apple only.  Still tracking down on my end why.  Apple did call to let me know there was an attempt to purchase a Mac Book Pro.  They cancelled it and I notified my card company, cancelling that account.  The card company fraud department said they were going to work with Apple.  Will let you know the rest of the story.

My account was hacked as well. I woke up and saw two new games on my iPhone. Then I had an email from Apple about a purchase from an iDevice that wasn't associated with my Apple ID. Whoever hacked my account spent $25. I had a $25 dollar gift card added to my account, but I had already used 5 dollars of it. The games were in Chinese. I couldn't read any of it. I contacted Apple IMMEDIATELY. Within a resonible amount of time, I got a reply from Apple. They said they carefully reviewed my case and they will refund me a credit of $25. They did disable my account. From reading these previous post I see that most people's accounts were hacked if they had a credit from an iTunes gift card. I've had an iPhone since 2008 and NOT once have I had a problem until now. If I ever add a gift card again, I will only do so when I am ready to make a purchase right then & there. I hope Apple can fix this problem because it is such a hassle.

I was hacked overnight also.  Woke up.  Checked iPod and there was that mysterious chinese app and tons of in-app purchases.  Lost $30 worth of credit.

Wow, it happened to me a second time. Bunch of chinese apps were bought, so I talked to Apple and got my store credit back yesterday. I changed my password and security question after i talked to Apple, but I just got another receipt saying I bought more chinese apps 15 minutes ago.

OMG that is ubelievable!!!  How the heck is Apple not onto this by now?!?!!

They NEED to release a new version of iTunes that only allows purchases from authorized devices ASAP!!!!

Although Apple has refunded all $199.90 of charges to my credit card without any argument (which tell's me they know what's going on).

Now what I find truly disturbing is that Apple is actually breaking federal law by not notifying us as their customers that their system has been compomised! There is NO WAY that they can't be aware of this and denying it is not only UNETHICAL it is ILLEGAL! It this really the way Apple is doing business now?!

Sorry, I meant "Is this" not "It this", my annoyance is effecting my grammer.

This is too bad that it's happening. Especially now that there are so many devices out there, I can see it becoming more of an issue. I recently got my account hacked for $40 total for in-app purchases for the game Galaxy Empire. I know it wasn't me because I disabled in-app purchases and the kids don't touch that game. I noticed a bunch of Korean characters in the chat panel when I logged in to see who/what/where this hack was coming from.

I hope I get my money back with the dispute I put through with Paypal. It's too bad this is happending with these minor virtual goods. Just imagine in 20 years when everything is virtual good and things get stolen left and right without a trace.

If this can happend to Apple, it's going to be a scary world then.

I've been with MS on Xbox Live since its inception in 2001. NEVER ONCE had I been hacked to buying virtual goods. Apple has dropped the ball on this one. I hope I get my refund soon.