stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 87 of 131 last Next
  • by Chris CA,

    Chris CA Chris CA Mar 5, 2012 12:37 PM in response to cdwilson127
    Level 9 (79,692 points)
    iTunes
    Mar 5, 2012 12:37 PM in response to cdwilson127

    cdwilson127 wrote:

     

    This is defiantly not a used problem, I put a 50$ gift card on

    My account 2 days ago, I used my windows

    Laptop, and I woke up yesterday with 30$ gone, the

    Main thing I see is gift cards being used, I had my credit card

    Attached to my iTunes account but they didn't use that..

    You don't have a choice of which to use.

    If you make a purchase, it comes first from the gift card and when that is gone, it uses the CC.

  • by aftermac,

    aftermac aftermac Mar 5, 2012 12:52 PM in response to Chris CA
    Level 1 (15 points)
    Mar 5, 2012 12:52 PM in response to Chris CA

    My iTunes account was compromised two years ago and I haven't used one since. What I am doing now, since there is more focus on downloading content and apps from the various Apple stores, is setting up a new account that is not attached to a credit card. If I want to make purchases, I will buy a small dollar amount gift card and use it very quickly.

     

    Also, I am no longer going to use my actual email address as my Apple ID. I have a domain through godaddy that allows me to setup 100 redirected email accounts, which I will redirect to my actual email. That way I don't have to setup a new email address (to change my Apple ID name) if this ever happens again... I'll just setup a new redirect.

  • by Chris CA,

    Chris CA Chris CA Mar 5, 2012 12:58 PM in response to aftermac
    Level 9 (79,692 points)
    iTunes
    Mar 5, 2012 12:58 PM in response to aftermac

    aftermac wrote:

     

    My iTunes account was compromised two years ago and I haven't used one since. What I am doing now,

    Why not simply add your CC when you want to purchase then immediately remove it after you complete the purchase?

  • by aftermac,

    aftermac aftermac Mar 5, 2012 1:47 PM in response to Chris CA
    Level 1 (15 points)
    Mar 5, 2012 1:47 PM in response to Chris CA

    When my account was compromised, the only thing I purchased from Apple was music through iTunes. The Mac App store didn't exist and I didn't have an iPhone. The need to download anything from Apple using my ID was minimal. I first found out about the illegal activity when my credit card was declined trying to purchase a $5 footlong from Subway. Some purchases on my account were charged to my credit card, some did not go through. Those charges are STILL on my Apple ID because Apple refused to remove them without me paying for them, then refunding me. I was advised by my bank's fraud department NOT to pay for the charges, because that would be ad admission of guilt. Therefore, if I add a credit card to my current Apple ID, those charges would be immediately charged to my credit card.

     

    As for the new account, my theory is why take the chance? At least with a gift card there is a finite amount that a would be theif could get away with. There is no risk of anyone making charges to my card and getting my bank involved, cancelling my credit card, contacting my utilities and updating my autopay bills, etc... Essentially, saving myself a lot of hassle. If I want to make a purchase, I can buy a gift card from the drug store down the street.

  • by Don Melchor,

    Don Melchor Don Melchor Mar 5, 2012 2:50 PM in response to lluke71
    Level 1 (0 points)
    Mar 5, 2012 2:50 PM in response to lluke71

    I was hacked last night by Asia as well ($31 and left $1 so nice!)...this is getting ridiculous!  Own a Ipod and now I'm not sure if i will go ahead with Ipad purchase planned for May????

  • by JennieFisher,

    JennieFisher JennieFisher Mar 5, 2012 3:51 PM in response to Don Melchor
    Level 1 (0 points)
    Mar 5, 2012 3:51 PM in response to Don Melchor

    Could this mass hacking be why my card isn't being accepted? I haven't been hacked, but I guess it could explain it...

  • by duckcod,

    duckcod duckcod Mar 5, 2012 5:47 PM in response to JennieFisher
    Level 1 (0 points)
    Mar 5, 2012 5:47 PM in response to JennieFisher

    My account was just hacked today and I lost $36.23. I had a $50 gift card and luckily no CC info was on my account. I contacted support and hope that they can help me.

  • by bigalba,

    bigalba bigalba Mar 5, 2012 9:53 PM in response to funwakinmade
    Level 1 (0 points)
    Mar 5, 2012 9:53 PM in response to funwakinmade

    Exactly the same thing happened to me today.  £15 wiped from a gift card account I'd just loaded the other day.  Never heard of Kingdom Conquest, never downloaded it or played it yet there it is on my iTunes library.  ***?  And apparently there have been complaints linked to this app going back to 2010!  What is going on?  Why have Apple taken no action?  Curiously, when I tried to 'report a problem' the link next to this app did not take me to the itunes page but out to apple support on my browser.  Where of course you get into a circular argument over how to report the problem.  Eventually clicked next to another app and used the itunes page it loaded to report Kingdom Conquest.  Awaiting a reply from the store.

  • by Vinstant,

    Vinstant Vinstant Mar 6, 2012 2:46 AM in response to stereocourier
    Level 1 (0 points)
    Mar 6, 2012 2:46 AM in response to stereocourier

    This is starting to be a bit worrysome.  As everyone has reported the infamous Kingdom Conquest showed up on my account today March 6 and drained my account with an in-app purchase of about $45,00.  Their is a serious problem going on here with our App Store accounts being hacked.  I never had to worry about my account being compromised, until I researched on the problem.  I really hope the problem gets resolved soon.

  • by Paula_R,

    Paula_R Paula_R Mar 6, 2012 9:42 AM in response to Vinstant
    Level 1 (4 points)
    Mar 6, 2012 9:42 AM in response to Vinstant

    Count me in to the iTunes hack world.  My first indication was a strange Chinese app showed up on my phone while I was at a party.  I took a photo of it because I thought it was funny.  Then when I got home, I discovered that many more purchases had been attempted.  Luckily, Apple caught the problem and as far as I can tell, no charges actually made it through PayPal (I don't like to expose my credit card # too often)..

     

    I thought perhaps it was because I'd bought a new PC and downloaded some spyware accidentally, but from the insane volume of people posting here, I can see this is a pervasive issue.  It's a dirty little secret.

     

    I suppose the good news is, Apple is figuring out when an account is being hacked.  But my gosh...what a shock.

  • by MadScientistZ,

    MadScientistZ MadScientistZ Mar 6, 2012 1:32 PM in response to stereocourier
    Level 1 (0 points)
    Mar 6, 2012 1:32 PM in response to stereocourier

    Well, we've hit a new low for Apple and iTunes:

     

    My account was hacked in February. Apple refunded the $99.99 to me a month ago. Last night I tried to buy a song and my $99.99 is missing. Nobody bought anything on my account. Not even a cryptic email from Apple about another Chinese app download.

     

    Apple iTunes support is, at best, third-rate.

     

    The following is now my second email back-and-forth with Apple iTunes support:

     

    Dear XXXXXX,

     

    This is Shweta here, again. Thank you for your quick response.

     

    The order you are inquiring about was refunded on 02/01/2012, and should be available within 5-7 business days from the date it was processed.

     

    Thank you for being such a valued iTunes Store Customer. Apple wants your iTunes experience to be as exciting as possible.

     

    Have a great day!

     

     

    Yes, Apple refunded the $99.99 a month ago. Now it's missing again!

     

    You know, denial isn't just a river in Africa; it's also how Apple iTune support works!

  • by MadScientistZ,

    MadScientistZ MadScientistZ Mar 6, 2012 2:15 PM in response to stereocourier
    Level 1 (0 points)
    Mar 6, 2012 2:15 PM in response to stereocourier

    This just gets better and better from Apple:

     

    Dear David,

     

    This is Shweta here, again.

     

    When charges are reported as unauthorized, any remaining iTunes Store credit from the disputed purchase is considered unauthorized and is removed from the account.

     

    Thank you for your understanding.

     

    So, somebody charges $99.99 on my account, then Apple refunds it.... and then they take it away again! This is crazy!

  • by PatrickGSR94,

    PatrickGSR94 PatrickGSR94 Mar 6, 2012 2:30 PM in response to MadScientistZ
    Level 1 (2 points)
    Mar 6, 2012 2:30 PM in response to MadScientistZ

    whoa whoa ***???  They refunded the unauthorized charges on my account, and I have since used some of it and still have some left.  I've NEVER heard of that before!

  • by MadScientistZ,

    MadScientistZ MadScientistZ Mar 6, 2012 2:34 PM in response to PatrickGSR94
    Level 1 (0 points)
    Mar 6, 2012 2:34 PM in response to PatrickGSR94

    PatrickGSR94 wrote:

     

    whoa whoa ***???  They refunded the unauthorized charges on my account, and I have since used some of it and still have some left.  I've NEVER heard of that before!

     

    Yup, that's exactly right. I, too, purchased one song since the hack... so I should have about $99.01 in my account.

     

    I've now been sitting on hold for 10 minutes (and waiting!) with Apple phone support.... jeez.

  • by caebrasil br,

    caebrasil br caebrasil br Mar 6, 2012 2:50 PM in response to stereocourier
    Level 1 (0 points)
    Mar 6, 2012 2:50 PM in response to stereocourier

    Same problem here: someone hacked my account, bought 3 In-apps on the game Kingdom Conquest (-kingdomconquest-, that I never downloaded!) and cleaned my credits. Now I'm on support, wayting for refund.

    So many complaints, it's clear that have something wrong here!

first Previous Page 87 of 131 last Next