stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 102 of 131 last Next
  • by Linj,

    Linj Linj Apr 21, 2012 7:06 PM in response to doritie
    Level 1 (0 points)
    Apr 21, 2012 7:06 PM in response to doritie

    Call 1-800- MY APPLE an DEMAND they submit a "CALL ME NOW" request.

  • by Snotfjold,

    Snotfjold Snotfjold Apr 22, 2012 5:36 AM in response to Linj
    Level 1 (0 points)
    Apr 22, 2012 5:36 AM in response to Linj

    Friday April 20 some a$$ managed to use my iTunes account to steal over 100 dollars. I was, obviously, shocked and upset. I immediately changed my password and wrote the iTunes security help desk. The answered after a few hours with the positive news that they would refund the whole amount.

     

    Now I have again changed my password and have reactivated my account.

     

    The help from Apple was very friendly and prompt.

     

    As it seems a lot of people have similar problems like I had I sincerely hope Apple learns and makes the appropriate changes. For one I'd like to be able to manually disable in-app purchases so the same cannot happen again.

     

    These thefts costs us customers stress and in a lot of cases, a lot of money. I was fortunate that I got my money back but happens the next time?

     

    P.S. thank you Liz @ Apple

  • by Gerry Creighton,

    Gerry Creighton Gerry Creighton Apr 22, 2012 8:15 AM in response to stereocourier
    Level 1 (35 points)
    Apr 22, 2012 8:15 AM in response to stereocourier

    +1

    My account CC was changed to a card I do not own and 4 purchases were made. I tried to follow the "report a problem" steps but that failed which I wasn't real happy with. The user friendlyness is gone for this process. I have an email dialogue going with support now so hopefully this gets resolved today.

  • by clarify69,

    clarify69 clarify69 Apr 22, 2012 8:22 AM in response to stereocourier
    Level 1 (0 points)
    Apr 22, 2012 8:22 AM in response to stereocourier

    I woke up this morning to find 2 emails:

     

    Your Apple IDwas just used to download -KingdomConquest- from the App Store on a computer or device that had not previously been associated with that Apple ID.

     

    If you initiated this download, you can disregard this email. It was only sent to alert you in case you did not initiate the download yourself.

    Dear Clare Gould,

     

    Your Apple ID was just used to make a purchase in MetalStorm: Wingman from the App Store on a computer or device that had not previously been associated with that Apple ID.

     

    If you made this purchase, you can disregard this email. It was only sent to alert you in case you did not make the purchase yourself.

    what the heck??? this happen a few weeks ago as well!! I am so freakin' mad!!  i tripple checked all my security and know it was not my kids as they do not know my password. both emails came through at 12:30 am.  I am in the process of contacting apple.

    Did i mention how freakin' mad I am???

  • by Steven Bobbitt,

    Steven Bobbitt Steven Bobbitt Apr 22, 2012 8:38 AM in response to clarify69
    Level 1 (0 points)
    Apr 22, 2012 8:38 AM in response to clarify69

    Trying to figure out the gain here, how are these guys making money? Surely its not the App they are after? And how many of the same app do they need? I don't believe they are getting in through the front door, if so why stop at buying an app when they can use the same account to login to the store and buy a new mac pro? 

     

    Is it easy to do and they get their kicks out of doing it, is it common knowledge and its 1000s of hackers doing the same thing or is it just 1 or 2 doing this?

     

    Is the solution more costly than the problem? or else why wouldn't apple resolve it?

     

    Its all so strange to me.

  • by clarify69,

    clarify69 clarify69 Apr 22, 2012 8:50 AM in response to Steven Bobbitt
    Level 1 (0 points)
    Apr 22, 2012 8:50 AM in response to Steven Bobbitt

    it's rediculous. Does apple not see there is a problem here??  I now just got an email stating that my apple id info concerning my credit card was updated. after changing both my id AND password! this is freaking me out!

  • by clarify69,

    clarify69 clarify69 Apr 22, 2012 8:52 AM in response to clarify69
    Level 1 (0 points)
    Apr 22, 2012 8:52 AM in response to clarify69

    could it be someone has not only hacking into my itunes account by my computer???

  • by Carlo TD,

    Carlo TD Carlo TD Apr 22, 2012 8:55 AM in response to clarify69
    Level 3 (558 points)
    Apr 22, 2012 8:55 AM in response to clarify69

    Let me see if I understand this... you changed your password and your apple id (curious of how you did that?) and then after you did that you recived an email stating that your apple id was updated... yup sounds very suspisious.... I would call your bank and tell them as soon as you can.

  • by smachson,

    smachson smachson Apr 22, 2012 9:06 AM in response to Steven Bobbitt
    Level 1 (0 points)
    Apr 22, 2012 9:06 AM in response to Steven Bobbitt

    Here's my take - they test stolen credit cards on iTunes to see if they work... then use the stolen cards elsewhere.

  • by jbprints,

    jbprints jbprints Apr 22, 2012 9:58 AM in response to Leksluthah
    Level 1 (0 points)
    Apr 22, 2012 9:58 AM in response to Leksluthah

    We just received two receipts for $50.00 gift cards.  Checked my Apple ID and it appears that they used my name and email address but changed all tho other information, including the Credit Card account number. The address was changed to Starksville, MS as well as the phi e area code.  This happened Three days after receiving a new MC and letter from MC stating that our card info had been stolen from a third party processeor.  Italked to Apple support and it sounds like the THIEVES are using a matching name and card number but to an existing account with a non-matching email address.  Next step is to contact MC I suppose.

  • by clarify69,

    clarify69 clarify69 Apr 22, 2012 10:19 AM in response to smachson
    Level 1 (0 points)
    Apr 22, 2012 10:19 AM in response to smachson

    That sounds like a good theory.

    It allows you to change your id after you sign in.....

    FYI i did not receive an email receipt for the apps or in-app purchases that were stolen from my account.

  • by I Love Rob Dyrdek,

    I Love Rob Dyrdek I Love Rob Dyrdek Apr 23, 2012 3:31 PM in response to pa_drumz
    Level 1 (0 points)
    Apr 23, 2012 3:31 PM in response to pa_drumz

    That stinks

  • by TierrayLibertad,

    TierrayLibertad TierrayLibertad Apr 24, 2012 5:01 AM in response to I Love Rob Dyrdek
    Level 1 (0 points)
    Apr 24, 2012 5:01 AM in response to I Love Rob Dyrdek

    Same thing here.  Happened last week, one copy of Kingdom Come, money stolen from my Paypal account which was linked to my itunes.  I changed my apple id and my password, but it happened again yesterday anyway (four copies stolen), didn't get the confirmation email from itunes until this morning, but got the Paypal receipt right away. I have now disconnected my Paypal from my itunes, and I doubt I will be reconnecting it.  Apple doesn't seem interested in fixing this problem - all I have is an ipod, and they aren't exactly winning me over as a customer.

  • by iJerOmy,

    iJerOmy iJerOmy Apr 24, 2012 6:58 AM in response to stereocourier
    Level 1 (0 points)
    Apr 24, 2012 6:58 AM in response to stereocourier

    I also had my account hacked.   The thing is my password was FAR FROM easy, they had access to my account by using my apple id and password ?!?!?!?  WTH..... how does this happen.... I also use 1 password, so i NEVER have to type my password in front of anyone on my computer. (incase i'm at school or something)    I wonder if there was some kind of leak of peoples account info.... It seems to me that alot of people were hacked this week and it seems as if apple is amping up security on all acounts.   Apprently they are supposed to be starting a Security Question system before you can purchase apps!         HMMM  dunno ......

  • by iJerOmy,

    iJerOmy iJerOmy Apr 24, 2012 7:01 AM in response to Linj
    Level 1 (0 points)
    Apr 24, 2012 7:01 AM in response to Linj

    I called someone who gave me the instructions below and someone contacted me back by email within like 4 hours ....... they had my money credited and my account locked!  

     

     

     

    1. To contact iTunes Support, please go to:

    apple.com/support/itunes/contact

     

    2. Click "Get iTunes Support via Express Lane" button.

     

    3. Click "iTunes Store" in the middle column and select a support category.

     

    4. Click "Continue".

     

    5. Under "Issue Description", select a topic.

     

    6. Answer the questions under "Issue Description".

     

    7. Click "Continue".

     

    8. You would see either "Optional Sign In" or "Contact Options". Sign In or click "Continue without signing in".

     

    9. Under "Contact Options", click "Email" and provide your contact information.

     

    10. Provide the details about the issue and click "Send".

first Previous Page 102 of 131 last Next