stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 18 of 131 last Next
  • by funwakinmade,

    funwakinmade funwakinmade Apr 27, 2011 6:51 AM in response to stereocourier
    Level 1 (0 points)
    Apr 27, 2011 6:51 AM in response to stereocourier

    Hi guys...the same thing happened to me as well.. just yesterday i got an email saying that i had spent like $33.97 on some funny game called KINGDOM CONQUEST http://itunes.apple.com/us/app/kingdomconquest/id384877854?mt=8

     

    This is quite a horrendous experience... i had assumed that ITunes was supersecure! By comparison, i have been shopping on AMAZON for over 6 years and i am yet to face any such issue.

     

    Now who do i email about this? Before they clear out the US$50 or so i have left!!

  • by MrHughes,

    MrHughes MrHughes Apr 27, 2011 7:54 AM in response to funwakinmade
    Level 1 (0 points)
    Apr 27, 2011 7:54 AM in response to funwakinmade

    On your receipt you can click on the "report a problem" link and report it. I have been waiting for three days with nothing more than a "we got your e-mail" e-mail. This is annoying and frustrating. I have been telling all my friends to change their passwords and remove their credit card info from iTunes.

  • by Newbear999,

    Newbear999 Newbear999 Apr 27, 2011 8:59 AM in response to Beast70
    Level 1 (0 points)
    Apr 27, 2011 8:59 AM in response to Beast70

    I was just charged two instances of $19.99 by this same vendor. I don't have their app on my ipad yet I was charged.

  • by bburpee,

    bburpee bburpee Apr 27, 2011 12:02 PM in response to Newbear999
    Level 1 (0 points)
    Apr 27, 2011 12:02 PM in response to Newbear999

    I also got ripped off for $19.99 for this "Boyaa Texas Hold 'Em" that I've never seen/heard of/used.

     

    This is seriously disappointing... worse than any virus.

  • by StoneyPA,

    StoneyPA StoneyPA Apr 27, 2011 12:09 PM in response to MrHughes
    Level 1 (0 points)
    Apr 27, 2011 12:09 PM in response to MrHughes

       You're doing all you can and going about it in the right way MrHughes.  They finally re-enabled my account after 11 days, but still no refund of my stolen gift card and that's now 17 days and counting.  I'm writing it off as a lost cause since iTunes support is almost useless with their laissez-faire attitude in this hacking debacle.  Still amazed it's not in the news, but I guess money still talks...

  • by Chris CA,

    Chris CA Chris CA Apr 27, 2011 1:40 PM in response to MrHughes
    Level 9 (79,692 points)
    iTunes
    Apr 27, 2011 1:40 PM in response to MrHughes

    MrHughes wrote:

     

    On your receipt you can click on the "report a problem" link and report it. I have been waiting for three days with nothing more than a "we got your e-mail" e-mail.

    If it is more than 48 hours, respond to the email and restate your problem.

    I have been telling all my friends to change their passwords and remove their credit card info from iTunes.

    If you had a credit card charged, you should contact your CC company and dispute the charges.

    Also, make sure you change your security questions for your AppleID here -> Apple - My AppleID

  • by tuesday_,

    tuesday_ tuesday_ Apr 27, 2011 4:06 PM in response to tuesday_
    Level 1 (0 points)
    Apr 27, 2011 4:06 PM in response to tuesday_

    I just wanted to follow-up and say that the service that I've received from Apple support has been fantastic. I had a response within 48 hours (and on a public holiday) and that my account was reset and refund processed within 24 hours.

     

    I'm sorry to hear that some people have received poor service from Apple but that hasn't been my exprience at all.

  • by Zakarumae,

    Zakarumae Zakarumae Apr 29, 2011 6:00 AM in response to tuesday_
    Level 1 (0 points)
    Apr 29, 2011 6:00 AM in response to tuesday_

    I got hit today with this issue (for some poker game I never downloaded, purchased chips worth all but $0.18 from an itunes gift card I added to my account.  I used my macbook to add the gift card, not a mobile device. 

     

    My request to technical support went through within an hour, and they deauthorized all computers from being able to use the account, and are giving me a refund for the amount lost.  So, I am pretty happy with the response.  Now to just figure out how this happened in the first place. 

  • by Chris CA,

    Chris CA Chris CA Apr 29, 2011 8:06 AM in response to Zakarumae
    Level 9 (79,692 points)
    iTunes
    Apr 29, 2011 8:06 AM in response to Zakarumae

    Go here -> Apple - My AppleID

    Make sure you change you password AND your security questions.

  • by paw9000,

    paw9000 paw9000 Apr 29, 2011 11:59 AM in response to funwakinmade
    Level 1 (0 points)
    Apr 29, 2011 11:59 AM in response to funwakinmade

    I got a bill for $43.99 for in game purchases on KingdomConquest.  I never downloaded this application before.  after recieving this bill I logged into iTunes to download my latest podcasts, it downloaded KingdomConquest, and put it on my iPhone when I synced, but that happened after I got the bill saying I purchased in game stuff.

     

    I had a 50$ gift card on my iTunes account.  That seems to be the common denominator.  There seems to be alot of people on this thread that got billed from KingdomConquest and had a balance on their iTunes account from gift cards.

  • by dogcutter,

    dogcutter dogcutter Apr 29, 2011 8:33 PM in response to stereocourier
    Level 1 (0 points)
    Apr 29, 2011 8:33 PM in response to stereocourier

    Just got hacked as well. $20 for an app called Lian Wo from the developer KANGBIN. When I first contacted them they tried telling me how to download it but after a second email they refunded me and disabled my account. Now I've change my password and security question and have sent an email back to them to reactivate it so hopefully I'm all good now. This is an ongoing problem that Apple really needs to look into and fix.

              

    Lianwo, v1.0, Seller: KANG BIN
  • by eric.h.210,

    eric.h.210 eric.h.210 Apr 29, 2011 11:55 PM in response to stereocourier
    Level 1 (0 points)
    Apr 29, 2011 11:55 PM in response to stereocourier

    Same thing happened to me yesterday... I had about $50 in giftcard credit and they bought "KingdomConquest" apps, deleted my credit card info, and changed my city to Towson, MD.

  • by maximumjones,

    maximumjones maximumjones May 1, 2011 2:48 PM in response to eric.h.210
    Level 1 (0 points)
    May 1, 2011 2:48 PM in response to eric.h.210

    Same thing happend to me.  There was an unauthorized purchase for Kamagames Texas Poker game which I did not even know existed.

     

    Apple replied very quickly and refunded my money, but it is very scary that their system is so easily compromised.

     

    My computer has been thoroughly checked and it was definitely not on my end.  Thank God I never put a credit card on my account and all they did was clean out my store credit from itunes cards.

     

    Apple needs to get a handle on this ASAP.

  • by frankfromeagleville,

    frankfromeagleville frankfromeagleville May 1, 2011 6:33 PM in response to stereocourier
    Level 1 (0 points)
    May 1, 2011 6:33 PM in response to stereocourier

    This just happened to me, account changed to Towson, MD and my balance wiped out. My wife was actually about to purchase an iPad 2 this week, but I told her to hold off until I get this resolved. I won't spend more money on their products while they have these issues. I haven't even made any purchases for a while on my account other than a couple of free movie trailer downloads.

  • by paw9000,

    paw9000 paw9000 May 2, 2011 10:29 AM in response to paw9000
    Level 1 (0 points)
    May 2, 2011 10:29 AM in response to paw9000

    Apple refunded the 50$ gift cards worth back to my account, took about 36ish hours, but now my account is locked so I cant buy things with it, sounds like that might eventually get fixed but its not clear when.  Reading over the other posts here they removed the credit card from my account too, and also changed my town to Towson, MD.  I ran full virus scans on both my home machine and my work computer and didn't find anything.

     

    What I'm trying to figure out is how some one could make an in game purchase using my account and then have that benefit them for their account some how?  Maybe there is some exploit in these programs that people are taking advantage of that lets them get around the fact that they are using some one else's account to buy this stuff?

     

    What I'd like to see come out of this is some sort of optional additional security measure we could set on our accounts to help prevent this.  For example make it so purchases can only be made from a iPhone those network MAC address matches one on file for the account.  Or if making a purchase from a computer the iPhone has to be physically connected to the machine for the purchase to be valid.

first Previous Page 18 of 131 last Next