stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 89 of 131 last Next
  • by YUKON_HO,

    YUKON_HO YUKON_HO Mar 7, 2012 10:57 PM in response to stereocourier
    Level 1 (0 points)
    Mar 7, 2012 10:57 PM in response to stereocourier

    I  got hacked sometime ago and then got my cash back through usual Apple rigmarole. I am curious as to what other poeple have to say about the fact that it seems like all these fraudulent charges are only applied to games and in game purchases. Why nothing else? Like books, music, movies other apps?

  • by mrsfromab,

    mrsfromab mrsfromab Mar 8, 2012 12:25 AM in response to Peewh
    Level 1 (0 points)
    Mar 8, 2012 12:25 AM in response to Peewh

    Mine was hacked last night:

     

    风云三国, 600 Gold-FengYunSanGuo

    Koramgame.com  In App Purchase  $9.99

     

    What the heck is an "In App Purchase"?

     

    Now this app keeps trying to download onto my computer. Is the app even valid?

     

    Also, it's been forever since I've checked my iTunes account information and it now shows there are  "4 computers authorized to play my iTune purchases". Could the hacker be one of the four because currently I have 2 computers and an iPhone (but I did log on at a friends once???) My only choice is to "deauthorize all" and I'm kind of scared to press that button... not knowing what's involved to get my computers reauthorized.

  • by assassin9110,

    assassin9110 assassin9110 Mar 8, 2012 5:58 AM in response to stereocourier
    Level 1 (0 points)
    Mar 8, 2012 5:58 AM in response to stereocourier

    i just received this email,

     

    Your Apple ID, (my email), was just used to download QQ欢乐王国 from the App Store on a computer or device that had not previously been associated with that Apple ID.

     

    --

     

    since then, ive changed my apple password, what should i do next? call support? what is their number so i can speak with a live rep. please help me

  • by the usernamekatyisalready taken,

    the usernamekatyisalready taken the usernamekatyisalready taken Mar 8, 2012 6:05 AM in response to assassin9110
    Level 1 (0 points)
    Mar 8, 2012 6:05 AM in response to assassin9110

    This is exactly what happened to me- unfortunately no humans are available to speak to at iTunes - you have to go via http://www.apple.com/support/itunes/  and clic 'contact support' at the bottom left of the page and use their "Express lane" method of contact. I did this and everthing worked out okay - I got a reply and my money refunded within 24 hours but had to reset my account AGAIN.

     

    I know it's horrible when this happens, but don't worry, it will be sorted out.

     

    HTH and good luck!

  • by the usernamekatyisalready taken,

    the usernamekatyisalready taken the usernamekatyisalready taken Mar 8, 2012 6:06 AM in response to assassin9110
    Level 1 (0 points)
    Mar 8, 2012 6:06 AM in response to assassin9110

    the option you need in Express Lane is "account management" btw

  • by the usernamekatyisalready taken,

    the usernamekatyisalready taken the usernamekatyisalready taken Mar 8, 2012 6:12 AM in response to YUKON_HO
    Level 1 (0 points)
    Mar 8, 2012 6:12 AM in response to YUKON_HO

    Mine where also all "In app purchases" from something from the developer 'Hangzhou MR.GLEE Tech. co., Ltd' 

  • by assassin9110,

    assassin9110 assassin9110 Mar 8, 2012 6:12 AM in response to the usernamekatyisalready taken
    Level 1 (0 points)
    Mar 8, 2012 6:12 AM in response to the usernamekatyisalready taken

    hey, what options do i pick after "account management"?

  • by PatrickGSR94,

    PatrickGSR94 PatrickGSR94 Mar 8, 2012 6:15 AM in response to mrsfromab
    Level 1 (2 points)
    Mar 8, 2012 6:15 AM in response to mrsfromab

    mrsfromab wrote:

     

    Mine was hacked last night:

     

    风云三国, 600 Gold-FengYunSanGuo

    Koramgame.com  In App Purchase  $9.99

     

    What the heck is an "In App Purchase"?

     

    Now this app keeps trying to download onto my computer. Is the app even valid?

     

    Also, it's been forever since I've checked my iTunes account information and it now shows there are  "4 computers authorized to play my iTune purchases". Could the hacker be one of the four because currently I have 2 computers and an iPhone (but I did log on at a friends once???) My only choice is to "deauthorize all" and I'm kind of scared to press that button... not knowing what's involved to get my computers reauthorized.

     

    An in-app purchase is for adding functionality to some apps, or in the case of games, purchasing various game credits which IMHO is just dumb.  Any app downloaded with your account will show up as "available" to download on any authorized computer.  I'd like to figure out if I can remove an app completely, but haven't been able to figure it out yet.  However in iTunes under Account, you can hide certain apps from being able to be downloaded.  I did that for the app that was d/l using my account a couple of weeks ago.

     

    I also noticed I had 5 authorized computers.  I thought I remembered doing that anyway, but to be sure I just went ahead and did Deauthorize All.  After that, it's as simple as pointing to Store > Authorize This Computer for any computer you want to be authorized.  Right now I have only two - home PC and work PC.

  • by the usernamekatyisalready taken,

    the usernamekatyisalready taken the usernamekatyisalready taken Mar 8, 2012 6:17 AM in response to assassin9110
    Level 1 (0 points)
    Mar 8, 2012 6:17 AM in response to assassin9110

    "my topic is not listed"! then "account ecurity" I guess

     

    I think I then just randomly answered the other questions as they aren't really relevent to your issue

  • by assassin9110,

    assassin9110 assassin9110 Mar 8, 2012 6:19 AM in response to the usernamekatyisalready taken
    Level 1 (0 points)
    Mar 8, 2012 6:19 AM in response to the usernamekatyisalready taken

    thanks, ill let you know what they say

  • by assassin9110,

    assassin9110 assassin9110 Mar 8, 2012 6:35 AM in response to stereocourier
    Level 1 (0 points)
    Mar 8, 2012 6:35 AM in response to stereocourier

    umm, in the mean time, what should i do to prevent this? i already changed my pws. it is cuz i had a gift card that they targeted us?

  • by the usernamekatyisalready taken,

    the usernamekatyisalready taken the usernamekatyisalready taken Mar 8, 2012 6:40 AM in response to assassin9110
    Level 1 (0 points)
    Mar 8, 2012 6:40 AM in response to assassin9110

    Dunno - Apple security seems pants - why cant we (for example) set our security so Apps etc can only be bought from authorised machines?, Or if a purchase is attempted from a new machine, why isn't there an option where you have to authorise this purchase BEFORE it goes through?

     

    I dont think there is anything else you can do to stop this happening again unfortunately

     

    And yes, I think we were targeted because of the gift card credit. Dont know why that is.

  • by PatrickGSR94,

    PatrickGSR94 PatrickGSR94 Mar 8, 2012 6:41 AM in response to the usernamekatyisalready taken
    Level 1 (2 points)
    Mar 8, 2012 6:41 AM in response to the usernamekatyisalready taken

    Just noticed that iTunes 10.6 is out, wonder if there have been any changes to help combat this widespread issue?

     

    On another note, iTunes Terms and Conditions were updated in the last 24 hours.  I know this part below didn't change, but I just happened to read it this morning:

     

     

    iTunes Terms and Conditions

     

    As a registered user of the iTunes Service, you may establish an account ("Account"). Don’t reveal your Account information to anyone else. You are solely responsible for maintaining the confidentiality and security of your Account and for all activities that occur on or through your Account, and you agree to immediately notify Apple of any security breach of your Account. Apple shall not be responsible for any losses arising out of the unauthorized use of your Account.

     

    Emphasis mine.  Really makes you feel great about Apple doesn't it? /sarcasm

  • by aircool,

    aircool aircool Mar 8, 2012 6:41 AM in response to assassin9110
    Level 1 (0 points)
    Mar 8, 2012 6:41 AM in response to assassin9110

    They have probably disabled your account now, when you eventually get back up and running I believe there is nothing you can do to prevent it happening again.

     

    Best guess, it relates to the gift card, I have no idea how this happens but if you read through this and other threads you will see a pattern emerge, many thousands of customers report the same.

     

    Check various other threads. 

  • by the usernamekatyisalready taken,

    the usernamekatyisalready taken the usernamekatyisalready taken Mar 8, 2012 6:46 AM in response to assassin9110
    Level 1 (0 points)
    Mar 8, 2012 6:46 AM in response to assassin9110

    and I guess the moral of this story is don't leave credit card info on your account and don't ever buy iTunes gift cards.

first Previous Page 89 of 131 last Next