stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 125 of 131 last Next
  • by MadMacs0,

    MadMacs0 MadMacs0 Feb 8, 2013 1:07 AM in response to ryandongg
    Level 5 (4,801 points)
    Feb 8, 2013 1:07 AM in response to ryandongg

    ryandongg wrote:

     

    these purchases were not made by me and dont show up on my itunes meaning someone is hacking me.

    No, if you discovered this on your credit card account that just means that somebody was able to get your credit card number by some means and used it to purchase items from the iTunes store. You first need to get those charges reversed by contacting your credit card company. If that number is in your iTunes account, then remove it and change your password to something stronger.

  • by TunesFan,

    TunesFan TunesFan Feb 11, 2013 12:52 PM in response to ElFamosoAlex
    Level 1 (10 points)
    Feb 11, 2013 12:52 PM in response to ElFamosoAlex

    Do you really think that the address belongs to the person who did this to you? Most likley, it belongs to a person who's credit card info was stolen from another source, then just added to your iTunes account. The person who owns the address is just as much a victim as you are. I wouldn't get too upset and try to find the person via that address, and also, Apple won't track the person down--that is the credit card company and police's job. Apple is not the cops.

     

    Hopefully, the card holder was reimbursed and the credit card company reported the issue to the police.

  • by LQK,

    LQK LQK Feb 11, 2013 7:19 PM in response to TunesFan
    Level 1 (0 points)
    Feb 11, 2013 7:19 PM in response to TunesFan

    I also just had my account hacked.  Only have a $24.99 charge for itunes match so far which I disputed, but cancelled my credit card on file.  Is there anything else I should do?  Thanks for any help you can provide.  Does Apple provide any severence for their server getting hacked as a sign that this isn't exceptable, or are we supposed to just accept that this is this the type of service we should expect from them?

  • by MadMacs0,

    MadMacs0 MadMacs0 Feb 11, 2013 9:52 PM in response to LQK
    Level 5 (4,801 points)
    Feb 11, 2013 9:52 PM in response to LQK

    LQK wrote:

     

    I also just had my account hacked.

    I assume you know that because they made changes to your account settings and you received a receipt for iTunes Match?

    cancelled my credit card on file.

    With the bank or just removed it from your iTunes account. You need to do both. 

    Is there anything else I should do?

     

    If you haven't already done so, change your password to something stronger than it was and don't use it anywhere else.

     

    Don't respond to any e-mail, supposedly from Apple, asking you to "click this link and log into your iTunes account."  They never send such e-mails.

     

    Does Apple provide any severence for their server getting hacked as a sign that this isn't exceptable...

    You're kidding, right?  Apple hasn't even admitted that any of this is their responsibility, dispite now 125 pages of testimony.

  • by Mark Williams1900,

    Mark Williams1900 Mark Williams1900 Feb 12, 2013 2:29 AM in response to MadMacs0
    Level 1 (50 points)
    Feb 12, 2013 2:29 AM in response to MadMacs0

    This is a forum for user to user help.

     

    The banks/credit card companies are exactly the same in having to deal with hacked accounts but you never see or hear that.

     

    The advice of myself and others still stands:-

    Cancel card with bank, watch account for fraudulent transactions and change passwords. Remove Card details from your iTunes account and either use redemption vouchers or pay for your purchases another way.

     

    It happens more and more as part of life now and Apple/Banks take it on the chin as long as you act on the flag that account hacked. This if your card changed then they will try that on someone else's account like yours.

     

    What would you want Apple to do except minor investigations and reimburse the money? Oh add the millions of iTunes account holders to that AND the costs involved.

     

    Live, learn and be vigilant to the ways that your money is being targeted for others benefit.

     

    Regards

     

    Mark

  • by LQK,

    LQK LQK Feb 12, 2013 6:03 PM in response to Mark Williams1900
    Level 1 (0 points)
    Feb 12, 2013 6:03 PM in response to Mark Williams1900

    Fair enough.  It seems like it is probably most vigilant to only pay for things that don't require a credit card on file with itunes.  Seems from the amount of posts that itunes is much more suceptible than Banks/Credit Cards etc. on their own.   

  • by Matthew8844,

    Matthew8844 Matthew8844 Feb 12, 2013 8:31 PM in response to ironMB
    Level 1 (0 points)
    Feb 12, 2013 8:31 PM in response to ironMB

    That's what happened to me too.

  • by transmogrification,

    transmogrification transmogrification Feb 27, 2013 9:31 AM in response to Griffin904
    Level 1 (5 points)
    Feb 27, 2013 9:31 AM in response to Griffin904

    Griffin904

     

    It may not even your be iTunes being hacked. It may your credit card being hacked totally unrelated to your iTunes. I would deal with this like any other credit card fraud. I would contact the credit card company or bank and get a replacement card and number and If the charges are not mine, contest them with the crecit card company or bank that issued the card.

  • by transmogrification,

    transmogrification transmogrification Feb 27, 2013 9:39 AM in response to MadMacs0
    Level 1 (5 points)
    Feb 27, 2013 9:39 AM in response to MadMacs0

    I agree with most of your post. I disagree that it is 125 pages of testimony. not all of these posts are from people who have been hacked. some are from other users trying to help. Regardless, there are quite a few here who are claiming to have been hacked. That their iTunes account was hacked or their credit card or whatever is important to point out. It is not apple's responsibility that one's credit card is hacked totally unrelated to one's iTunes account. Apple isn't a bank. The iTunes Store, is just that, an online store like any other.

  • by JuanG12,

    JuanG12 JuanG12 Feb 28, 2013 11:28 AM in response to stereocourier
    Level 1 (0 points)
    Feb 28, 2013 11:28 AM in response to stereocourier

    Had about $201 in my account yesterday and have about $134 today. I checked my account and someone just purchased a ton of games. I already contacted Apple, thanks to this thread. Hope everything gets sorted out.

  • by transmogrification,

    transmogrification transmogrification Mar 2, 2013 11:12 AM in response to LQK
    Level 1 (5 points)
    Mar 2, 2013 11:12 AM in response to LQK

    LQK wrote:

     

    Fair enough.  It seems like it is probably most vigilant to only pay for things that don't require a credit card on file with itunes.  Seems from the amount of posts that itunes is much more suceptible than Banks/Credit Cards etc. on their own.   

    Apple is not a bank. The iTunes store is an online store like most any other. Apple doesn't require a credit card on file with itunes. If you live in the US you can set up a PayPal account with iTunes, no credit card needed.

  • by TunesFan,

    TunesFan TunesFan Mar 2, 2013 12:03 PM in response to transmogrification
    Level 1 (10 points)
    Mar 2, 2013 12:03 PM in response to transmogrification

    You can also create an account just by clicking on a free item and clicking "create account". No one in the world has to add a credit card, gift card or Paypal to create an iTunes account.

     

    My account is set up like that; when I want to buy something, I just add my credit card, buy it, then take my card off.

    In the beginning I tapped on a free app and set it up--no info required.

  • by sinatrix,

    sinatrix sinatrix Mar 9, 2013 6:08 AM in response to sinatrix
    Level 1 (0 points)
    Mar 9, 2013 6:08 AM in response to sinatrix

    Hello everyone! Well I just wanted to update everyone on something I found. Now, I have long moved on from apple after this whole ordeal, but I still love keeping up with tech news. Stumbled accross this this morning, thought I would share with everyone:

     

    Apple Finally turns HTTPS on for the app store:

    http://elie.im/blog/web/apple-finally-turns-https-on-for-the-app-store-fixing-a- lot-of-vulnerabilities/#.UTs8f1dQqds

     

    Wow... now I am sure this is not the answer to everyone's problems, but it might explain some of the account thefts. Attacks include: Password stealing, App swapping, Privacy leak and more. Now, I realize this is simply a blog, but no worries for the doubters, videos are on the web site clearly showing how it works. Its worth checking out. I have no doubt some people have fallen victim to phishing emails and malicious sites, but this might shed some light on the others who, even when keeping safe over the web, could have still been compromised through no fault of their own. Hope you all have a nice day!

  • by transmogrification,

    transmogrification transmogrification Mar 19, 2013 11:10 AM in response to sinatrix
    Level 1 (5 points)
    Mar 19, 2013 11:10 AM in response to sinatrix

    sinatrix wrote:

     

    Hello everyone! Well I just wanted to update everyone on something I found. Now, I have long moved on from apple after this whole ordeal, but I still love keeping up with tech news. Stumbled accross this this morning, thought I would share with everyone:

     

    Apple Finally turns HTTPS on for the app store:

    http://elie.im/blog/web/apple-finally-turns-https-on-for-the-app-store-fixing-a- lot-of-vulnerabilities/#.UTs8f1dQqds

     

    For the protection of Apple's customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

  • by monafromfl,

    monafromfl monafromfl Mar 26, 2013 10:30 AM in response to MadMacs0
    Level 1 (0 points)
    Mar 26, 2013 10:30 AM in response to MadMacs0

    I was just contacted by the credit card company that I have on file with Itunes App store and told that a $10,000 purchased was attempted from Apple.  I too had to cancel my card.  This place must have a lot of dishonest people on board.  I won't be buying anymore apps because I don't plan on putting a new credit card on file.  They need to do something about this quickly.

first Previous Page 125 of 131 last Next