stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 32 of 131 last Next
  • by lindork,

    lindork lindork Aug 16, 2013 5:28 PM in response to stereocourier
    Level 1 (0 points)
    Aug 16, 2013 5:28 PM in response to stereocourier

    I am wondering if anyone who has had this happen to them is from Edmonton, Alberta?

     

    Linda

     

    <Email Edited By Host>

  • by albino76,

    albino76 albino76 Jul 1, 2011 6:00 AM in response to stereocourier
    Level 1 (0 points)
    Jul 1, 2011 6:00 AM in response to stereocourier

    Same thing here, I just received two emails advicing that my username has been used to make a purchase in Kingdom Conquest. I don't know yet how much was taken.

    I am very upset.

  • by Brian13732,

    Brian13732 Brian13732 Jul 1, 2011 12:21 PM in response to stereocourier
    Level 1 (0 points)
    Jul 1, 2011 12:21 PM in response to stereocourier

    Good news - after a couple of days trading emails back and forth with a very helpful Apple employee named Boom, all purchases made while hacked have been removed, account reinstated, and now I can update apps, etc.  I ended up going with $10 iTunes gift cards, so that just in case this happens again in the future, I'll only have $10 or less exposed.

  • by Coloratura,

    Coloratura Coloratura Jul 1, 2011 7:18 PM in response to stereocourier
    Level 1 (0 points)
    Jul 1, 2011 7:18 PM in response to stereocourier

    Add my account to the hacked list as well.  Not happy with apple at all, especially considering they want to handle everything via email.  Unauthorized charges are still on my credit card account as well which makes me a very unhappy camper.

  • by John Sowden,

    John Sowden John Sowden Jul 1, 2011 10:48 PM in response to stereocourier
    Level 1 (15 points)
    Jul 1, 2011 10:48 PM in response to stereocourier

    Hello again everyone. Good news in that it has only taken a couple of days to fix things up. But - obviously had to change my password in all things Apple. Money refunded to my itunes account. NO explanation as to how this happened and NO admission that the itunes store had been hacked! NO comment to my question about the security of my own personal details, including credit card which had been deleted. All I received was just two standard e-mails that virtually accused me of being at fault. Oh well, no credit card details will ever be left with Apple again and I shall go back to buying CDs!

    Good luck to everyone else who has experienced this same problem - hope you get your money back!

    Cheers,

    John

  • by sharonliverpool,

    sharonliverpool sharonliverpool Jul 1, 2011 10:50 PM in response to stereocourier
    Level 1 (0 points)
    Jul 1, 2011 10:50 PM in response to stereocourier

    got up this morning to find mine has been hacked too same app as people mention and credit gone, card deleted

  • by ShinkenRed,

    ShinkenRed ShinkenRed Jul 2, 2011 2:54 AM in response to stereocourier
    Level 1 (0 points)
    Jul 2, 2011 2:54 AM in response to stereocourier

    I got hacked as well, yesterday and today!

     

    I had £29.41 left in my account after buying Streetfighter IV: Volt on Thursday when it was on special offer and when I checked my email a couple of hours ago, I found that there were some unauthorized purchases for Kingdom Conquest which I knew I had definitely NOT bought as these were done while I was asleep and at the time, I was downloading video podcasts from iTunesU while asleep!

     

    Thanks to whoever had done this, I only have 54p left from £30 worth of giftcards which I had bought a couple of weeks ago.

     

    How do I go about arranging a refund from iTunes?

  • by lorifromharrisburg,

    lorifromharrisburg lorifromharrisburg Jul 2, 2011 5:39 AM in response to ShinkenRed
    Level 1 (0 points)
    Jul 2, 2011 5:39 AM in response to ShinkenRed

    Do what we have all done.  Immediately change your password, even though Apple will probably deactivate, and contact Apple immediately.  I did it via email and got a response in 24 hours, a refund in the next 24 hours and then they deactivatd my account.  I just had to reset.  Be complete and thorough in your email.  Good Luck!

  • by Cincytom,

    Cincytom Cincytom Jul 2, 2011 1:23 PM in response to lorifromharrisburg
    Level 1 (0 points)
    Jul 2, 2011 1:23 PM in response to lorifromharrisburg

    Got my money back, got my account working again. Got my money stolen again. This is criminal. I'm reporting my issue to the state attorney general. Obviously apple is trying to keep a lid on this. I'm done with them.

  • by ShinkenRed,

    ShinkenRed ShinkenRed Jul 2, 2011 10:58 PM in response to lorifromharrisburg
    Level 1 (0 points)
    Jul 2, 2011 10:58 PM in response to lorifromharrisburg

    I changed my password as soon as I could and I've already changed my security detals except my Apple ID as I don't know how to do that.

     

    I had to go to the Apple Store in Liverpool to get assistance on how to contact Apple Customer Support which I've done via the UK site, so I'm waiting to hear from them.

     

    You swear Apple are more concerned with protecting their reputation than helping their own customers.

     

    Oh well, I wonder how they'll feel when they get a lot of bad publicity when this story gets out to the wider media...

  • by edstreiff,

    edstreiff edstreiff Jul 3, 2011 9:22 AM in response to stereocourier
    Level 1 (0 points)
    Jul 3, 2011 9:22 AM in response to stereocourier

    Add me to the list of hacked accounts,

     

    for the past two weeks I have been getting frequent e-mails from apple saying my account has been blocked because of multiple password attempts.  I updated my password to a completely random series of numbers, letters and special characters that was 8 characters long but that was not enough.

     

    The hackers drained my gift card with in-app purchases from -KindomConquest- in total $8.99 as I only had $10 in credit remaining.  Its annoying to say the least my password was a strong password and it was still defeated.  Since there are so many other posts on here I am now starting to think that there is a flaw that Apple has not fixed that is allowing hackers to compromise so many accounts. 

     

    I e-mailed Apple about the purchases hopefully they do the right thing and refund the purchase.  I believe Apple is aware of this problem because they removed the credit card I had associated with my account.  However now I am concerned about using that account any more or any account tied to Apple because my password was complex and it was still hacked.

  • by wa1oui,

    wa1oui wa1oui Jul 4, 2011 9:02 AM in response to stereocourier
    Level 1 (13 points)
    iPhone
    Jul 4, 2011 9:02 AM in response to stereocourier

    One way around this problem I started using is if your credit card company uses a VAN or virtual account number.

     

    CitiCards lets you set up temporary credit card account numbers linked to your real account. You can set up an expiration date and maximum amount of money that can be charged. I now have a 99 cent credit card stored on iTunes. When I plan on buying something I'll go to Citi, up the amount to what I want to spend, and then make the purchase, being sure that $1 or so remains on the card. Apple (or any hacker) only sees the virtual account number, and never gets back to your original number.

     

    I would have preferred the amount to be less than 99 cents, but thats what happened after taxes... oh well.

  • by jackzuk,

    jackzuk jackzuk Jul 4, 2011 11:59 AM in response to stereocourier
    Level 1 (0 points)
    Jul 4, 2011 11:59 AM in response to stereocourier

    Account hacked too! I haven't logged for well over a year and have never recieved emails from apple so cant be phishing scam.

     

    I had 3 emails.

     

    1x CC information removed

    2x unauthorused purchase of Taxas Poker

     

    I have changed my password and security question/answer and email apple. Awaiting reply.

     

    Let see if apple are forthcoming

     

    Jackz from UK

  • by James Sprouls ACHDS,

    James Sprouls ACHDS James Sprouls ACHDS Jul 4, 2011 5:30 PM in response to stereocourier
    Level 2 (230 points)
    Jul 4, 2011 5:30 PM in response to stereocourier

    I have not been hacked, but after readiing about this ridiculous situation I did log in to my iTunes account and delete my credit card information. I mostly download free apps and free kindle books, and can enter CC info temporarily the rare times I do buy something. Also, in light of Apple's blatant refusal to step up and either explain what is happening or take the blame for this, I will never buy another song from iTunes unless it is unavailable elsewhere. Amazon has a very good selection at better prices and so far no sales tax.

  • by edstreiff,

    edstreiff edstreiff Jul 4, 2011 7:08 PM in response to edstreiff
    Level 1 (0 points)
    Jul 4, 2011 7:08 PM in response to edstreiff

    Apple was quick to refund the fraudulent purchases so chears to them however 15 minutes after they refunded my account it was drained again with the same -KingdomConquest- in-app purchase.  Apple support said they disabled my account which must have been a lie plus I changed my password to a 12 character random password with Capital Letters, Special Characters, and Numbers in a random order and still this happened which makes me think its not a password issue at all but rather an issue with their system that they are taking advantage of

     

    APPLE FIX THIS!!!!!

first Previous Page 32 of 131 last Next