stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 47 of 131 last Next
  • by boo radley 87,

    boo radley 87 boo radley 87 Sep 12, 2011 8:35 PM in response to stereocourier
    Level 1 (0 points)
    Sep 12, 2011 8:35 PM in response to stereocourier

    I just had the same thing happen to me, but they didn't change my address. They did however wipe my credit card details from the account and use up $50 worth of store credit.

     

    I've emailed apple about it, awaiting response.

  • by marcofromaustin,

    marcofromaustin marcofromaustin Sep 14, 2011 1:13 PM in response to stereocourier
    Level 1 (0 points)
    Sep 14, 2011 1:13 PM in response to stereocourier

    One more, here.  From the 47 pages of comments, this is obviously common.  Somebody changed my city, state and zip code, added some other credit card that I don't recognize, and purchased a $50 gift certificate.  Apple refunded it right away (hopefully to the credit card owner... whoever that poor guy is).

     

    What's strange to me is that when I went back to change my password, address, etc. to the real one, I got a notification that each of those things had changed, but I never got a notification when the original hacker did it.  I just got the purchase receipt. I doubt that the hacker had access to my email account (different password), and went in to dump the emails notifying me of changes to my account.  I think there's some bigger mistake by Apple, going on here.

     

    Marco

  • by itsafamilyname,

    itsafamilyname itsafamilyname Sep 15, 2011 11:30 PM in response to stereocourier
    Level 1 (0 points)
    Sep 15, 2011 11:30 PM in response to stereocourier

    Another hack of gift card balance for $35 to buy Gameloft's Order & Chaos and in-app stuff. Reported the fraudulant activity and changed the password. I hope Apple will get back to me and refund the balance.

     

    Video games about elves (?) are pretty far outside my puchase history.

  • by TfT02,

    TfT02 TfT02 Sep 17, 2011 1:14 AM in response to stereocourier
    Level 1 (0 points)
    Sep 17, 2011 1:14 AM in response to stereocourier

    I've had the same issue! 15€ from my account! How can I get my money back?

  • by TfT02,

    TfT02 TfT02 Sep 17, 2011 10:39 AM in response to TfT02
    Level 1 (0 points)
    Sep 17, 2011 10:39 AM in response to TfT02

    So I have contacted Apple and they will give me a full refund in 5 days! Great service Apple.

  • by POdatApple,

    POdatApple POdatApple Sep 17, 2011 11:48 AM in response to TfT02
    Level 1 (0 points)
    Sep 17, 2011 11:48 AM in response to TfT02

    $400 was stolen from our iTunes/paypal/bank accounts by hackers.  Soon after, I posted our experience on this message board.  Since then, I've been notified anytime anyone posts here.  We've received daily (sometimes hourly) posts from other victims and our trust is gone.  We've decided to end our relationship with Apple.  We're disabling iTunes...oh wait...it already was disabled by our Apple customer service rep....and we're handing our trust to the Android market.  It was a really hard decision to make, but perhaps Apple will increase security if they know they are losing customers.   In fact, because of our experience, some friends checked their account and found they had been victims of hackers too.  This is a serious problem that needs serious attention.  Goodbye Apple.

  • by Boojitsuokinawa,

    Boojitsuokinawa Boojitsuokinawa Sep 17, 2011 12:42 PM in response to POdatApple
    Level 1 (0 points)
    Sep 17, 2011 12:42 PM in response to POdatApple

    Yep,

     

    I've disabled my credit card info (now I have "none" as my payment option) and only use I-tunes for free songs of the week. I use Amazon MP3 now as it's actually cheaper most of the time (69 cent songs, $5 albums, depending on what you're looking for).

     

    I'm not saying Itunes is the only hacked music provider, but with how little they are doing to communicate with their users about this issue, they don't really deserve my continued support (in the form of buying music and itunes cards).

  • by Boojitsuokinawa,

    Boojitsuokinawa Boojitsuokinawa Sep 17, 2011 12:43 PM in response to TfT02
    Level 1 (0 points)
    Sep 17, 2011 12:43 PM in response to TfT02

    I had roughly 500 yen stolen, I contacted apple and they refunded it completely. Great service in this regard, but lack of communication and prevention in the hack doesn't quite balance out.

  • by Alastairhufc,

    Alastairhufc Alastairhufc Sep 17, 2011 2:07 PM in response to stereocourier
    Level 1 (0 points)
    Sep 17, 2011 2:07 PM in response to stereocourier

    I have had £24.67 taken today by Kingdom Conquest. I when onto my Purchase History and clicked the arrow by it before clicking 'Report a Problem'. Is there anything else I can do or will Apple just contact me? Will they email me?

  • by SocalNatv,

    SocalNatv SocalNatv Sep 17, 2011 8:17 PM in response to Alastairhufc
    Level 1 (0 points)
    Sep 17, 2011 8:17 PM in response to Alastairhufc

    Unfortunately all you CAN do is "report a problem" and wait.  They contacted me roughly 24 hours after I reported the problem with them stealing $95 worth of credit out of my account.  Also, when you DO "report a problem", it doesn't really seem like you did.  I was actually surprised when I got a response at all.

     

    After I responded to them with the requested information (last legitimate purchase made and my home address) immediately, I didn't hear anything from them for three days.  Come to find out, the person that was handling my issue was off on Sunday, Monday and returned on Tuesday.  So, they responded on Saturday afternoon and my issue wasn't resolved until Tuesday.  Seems silly to give an issue that needs serious attention to someone leaving, but at least the issue was resolved.  Just sucked having to wait to see an end to the issue.

     

    I keep wishing that there was a direct email or phone number to handle these sorts of issues, but when you think of all the hundreds of millions of people that use Apple products, can you imagine what manpower they would have to use to handle the call volume???  I get it, I really do  It would be nice to not see horrible people take advantage of innocent people like this. 

  • by reamus,

    reamus reamus Sep 18, 2011 9:04 PM in response to stereocourier
    Level 1 (0 points)
    Sep 18, 2011 9:04 PM in response to stereocourier

    Add me to the list.  Account info was changed yesterday and I tried to change my password, but I guess it didnt work because I never received a password update email.  Later than night I received 3 order confirmations, each for <$50 each spent on apps.  The theif used my name, a different address, and someone else's credit card.  I haven't used apple id or even itunes in years and never had a credit card tied to my account, so this was really odd for me.  Nothing else was compromised, so my finger is pointed at apple.  The only apple product I currently have is an old ipod nano, so I can't blame any rogue apps.  And the fact that I havent logged into my apple ID in years tells me it was very unlikely a keylogger was involved. Hmm?

  • by davidd10,

    davidd10 davidd10 Sep 18, 2011 11:49 PM in response to stereocourier
    Level 1 (0 points)
    Sep 18, 2011 11:49 PM in response to stereocourier

    Sign me up, my info was changed to...

    1517 baythorn drive
    wesley chapel, FL 33543-7870

    ...and my account was drained $50 for kingdom conquest + addons.  I just email apple, they shouldnt allow your information and account to be changed and then make purchases instantly, its just not right.

  • by MrGreencastle,

    MrGreencastle MrGreencastle Sep 19, 2011 12:32 AM in response to stereocourier
    Level 1 (0 points)
    Sep 19, 2011 12:32 AM in response to stereocourier

    Just got woken up by the notification on my phone that I had changed my credit info, and made new purchases.

    Obvious *** face. I instantly changed my password, and filed a report. I had $46.19 in gift card balance (from the $100 back to school when I bought my MacBook) stolen from me for a game called Kingdom Conquest. I will update when I get more news.

  • by gte222s,

    gte222s gte222s Sep 19, 2011 6:15 AM in response to reamus
    Level 1 (0 points)
    Sep 19, 2011 6:15 AM in response to reamus

    Add me too. Sept 18, 2011 4:49pm EDT

     

    I got an email telling me I'd updated my account info and figured it was spam looking for me to click a link. Looked at itunes just to be sure and sure enough, they had changed my city and state, credit card info, password and email. Eventually the system threw me out and I've not been able to get back in. And so far I've gotten confirmations of two $50 gift certificates purchased. I cancelled the credit card that was attached to the account to be on the safe side, even though it doesn't appear to have been used.

     

    The guy at Apple was very sympathetic, but not overly helpful. Can't believe Apple does not have a direct phone bank for itunes to handle these issues.

     

    I don't want to lose all the purchases I've made over the past 10 years or so just because someone hacked my account. I'm even paranoid to sync my iphone now, can't afford to lose access to that too.

     

    From recent posts here, it sounds like I'll get my account back in a few days, but I'm still waiting to hear back from Apple at this point. Just irritating.

  • by SimonJester753,

    SimonJester753 SimonJester753 Sep 19, 2011 7:15 AM in response to normal-et
    Level 1 (68 points)
    Desktops
    Sep 19, 2011 7:15 AM in response to normal-et

    I had someone buy ipad apps on my account. I don't own an ipad. No gift card involved, it was my credit card.

     

    Theyb still appear in my purchased items list, or they did last time I checked.

first Previous Page 47 of 131 last Next