stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 65 of 131 last Next
  • by swede#1,

    swede#1 swede#1 Dec 21, 2011 10:15 AM in response to iadubber
    Level 1 (0 points)
    Dec 21, 2011 10:15 AM in response to iadubber

    That's exactly the same answer I got from apple regarding my issue with unauthorized purchases on kingdom quest, I still haven't gotten my money back from iTunes, PayPal is still waiting for the sellers ( apple ) additional information, I guess they ( apple ) have 7 days to respond to PayPal.

     

    I still think it is scary how apple accepts purchases that are made on an non authorized device. It's also interesting how apple don't like to talk to you regarding things like this, but if you want to buy something they are more than willing to talk to you on the phone.

  • by iadubber,

    iadubber iadubber Dec 21, 2011 10:19 AM in response to swede#1
    Level 1 (0 points)
    Dec 21, 2011 10:19 AM in response to swede#1

    swede#1 wrote:

     

    That's exactly the same answer I got from apple regarding my issue with unauthorized purchases on kingdom quest, I still haven't gotten my money back from iTunes, PayPal is still waiting for the sellers ( apple ) additional information, I guess they ( apple ) have 7 days to respond to PayPal.

     

    I still think it is scary how apple accepts purchases that are made on an non authorized device. It's also interesting how apple don't like to talk to you regarding things like this, but if you want to buy something they are more than willing to talk to you on the phone.

    I totally agree here. What's the point of authorizing a computer then? If they are going to let any device buy whatever it wants. Kind of an oxymoron don't ya think?

     

       I got a reply to me asking how long Paypal and iTunes will take for a refund.

     

     

    Dear Chad,

     

    Hello. It's Mico again from iTunes Store Support. I hope you are having a good day despite the issue at hand.

     

    Chad, thank you for writing back. I can see that you have inquiries regarding the refund of the unauthorized purchases. I can certainly appreciate how eager you must be for answers, and I will provide you as much information for you as I can.

     

    I've looked into your account and was able to see that it has received a PayPal notification last 12/21/2011 informing that the payment for the unauthorized purchases has been reversed and the charges have been cleared.

     

    It's a pleasure to assist you. Should you have further queries, please feel free to respond and I'd be happy to assist you. Thank you for choosing the iTunes Store. Have a good day ahead.

     

    We'll see how long it takes Paypal to deposit.

  • by swede#1,

    swede#1 swede#1 Dec 21, 2011 10:22 AM in response to immortalisx
    Level 1 (0 points)
    Dec 21, 2011 10:22 AM in response to immortalisx

    Wow! It's still happening and apple don't seem to do anything to stop it?? That is REALY scary!!

  • by Karen.R,

    Karen.R Karen.R Dec 21, 2011 10:33 AM in response to iadubber
    Level 1 (0 points)
    Dec 21, 2011 10:33 AM in response to iadubber

    Let me say I was hacked last tuesday and with calling Apple I had my money back in my bank account yesterday.  I had paypal hooked to my Itunes.  I did NOT dispute the charge at paypal.  I went strait to apple.  Form what I have read paypal takes a long time and holds up the money.  Within 1 day of speaking to apple they had refunded my money to paypal and then it took a few days for paypal to clear everything and I had it in my bank account yesterday.

      To people who are calling apple and disputing payal.  You may get a hold up.  I mean if apple refunds the charges than you have no right to dispute them too.  It is one or the other.  If you do both than you are double dipping.  Apple giving you a refund and not paying for the orignal charges .  It also can screw things up.  You are disputing a refunded charge?    

     

    You have 30 days to dispute on Paypal.  I would try apple first and if that does not work go to paypal.  Ding both will cause more headaches. 

     

    I am also curious how many people in the grand scheme this is happening too.  I wonder if it is a app volunability.  Something a lot of people have .   

  • by Karen.R,

    Karen.R Karen.R Dec 21, 2011 10:35 AM in response to Karen.R
    Level 1 (0 points)
    Dec 21, 2011 10:35 AM in response to Karen.R

    How do you expect apple to stop it.  yes they should do something about the Kindom app.  But aside from that.  In China it is not frowned apon to hack and take stuff.  They feel if you left it open the deserve it.  The government employes people to hack other nations .   So what can really be done.  \

  • by swede#1,

    swede#1 swede#1 Dec 21, 2011 11:13 AM in response to Karen.R
    Level 1 (0 points)
    Dec 21, 2011 11:13 AM in response to Karen.R

    Um, in my case I wasn't disputing a refund, I filed a dispute with PayPal to the charges that had been done from

    iTunes.

  • by swede#1,

    swede#1 swede#1 Dec 21, 2011 11:21 AM in response to Karen.R
    Level 1 (0 points)
    Dec 21, 2011 11:21 AM in response to Karen.R

    Well, first of all I think they need to change how purchases are done, for example, why not have a system where they send you an email to you where you have to authorize a purchase before it can be done? Just like when you sign up for many forums, you have to click on a link in an email to verify that you are the one signing up? I'm not an expert, but I do know that something has to be done.

     

    And also, with the attitude you seem to have that it's not much to do and it's just part of life and we just have to accept it is scary, and what does what they do in china have to do with it? I don't understand your reasoning.

  • by Karen.R,

    Karen.R Karen.R Dec 21, 2011 11:21 AM in response to swede#1
    Level 1 (0 points)
    Dec 21, 2011 11:21 AM in response to swede#1

    You are disputing the original charges.  But if apple does a refund on them.  And you have disputed them.  It takes more time.    When a refund is done it shows up as a refund on the original purchase.  So you are disputing charges in theory you got a refund for.    What I was saying is do not do both yet.  try apple first and if that does not work go the paypal route.    And do not believe everything paypal says.  They are famous for " holding money waiting for funding"  when it clearly came out of your account days ago. 

  • by Karen.R,

    Karen.R Karen.R Dec 21, 2011 11:31 AM in response to swede#1
    Level 1 (0 points)
    Dec 21, 2011 11:31 AM in response to swede#1

    First by entering your passord you are verifiying the purchase.  Amazon does it the same way if you have saved info.  

      And yes Hacking happens.  It ***** there is nothing anyone can do.  I am sorry.  It happens all the time to people on all sorts of systems.    I am sorry it does but for every thing there is someone trying to hack.  And on china, well I know my problem came from there.  But I am making a point that a lot of other countrys and places do not care about hacking and encourage it. There is always someone looking for a expolit.

     

    There is nothing that can be done to stop hacking.  Someone  will always try.  Just like crime.  It happens you can not stop it but try to make it so you are not a victim and sometimes no matter what you do you become a victim   It is sad but true.   Hense I do not use windows because I know they have too many zero days.  Puts me in less of a position.

     

      Not using the internet is the only way to make yourself truely secure from any cyber crime.  And that is not realistic.       So I accept crime of all sorts.   I do not like it but it happens

  • by Freyar,

    Freyar Freyar Dec 21, 2011 11:34 AM in response to Karen.R
    Level 1 (0 points)
    Dec 21, 2011 11:34 AM in response to Karen.R

    Are you trying to detract from the possibility of an in-game exploit with regards to Kingdom Conquest? It's the same MO across the board.

  • by SimonJester753,

    SimonJester753 SimonJester753 Dec 21, 2011 11:49 AM in response to Karen.R
    Level 1 (68 points)
    Desktops
    Dec 21, 2011 11:49 AM in response to Karen.R

    I expect Apple to stop it quite simply: Create a preference in the user account set up where I tell them NOT to allow purchases through devices that I have not registered with Apple. So my account can ONLY buy things via MY iPhone or MY home computer.

     

    They already send us emails informing us of purchases made through devices not registered to us.

     

    Out of curiosity I contacted Sega to see what if anything they were doing about it. This is the exchange:

     

    -------------------------------------------------------------------------------- ---------------------

     

    Hi,

     

    We ask people to not use their passwords around others an just be more careful when using their iTunes account information online. I would not keep my email and password online when logging onto iTunes each and every time. That is the easiest way to get it taken from you.

     

    Regards,

     

    KC Support

     

    -----Original Message-----

    From: Bill Vojtech [mailto:xxxxxxxx]

    Sent: Wednesday, December 21, 2011 8:30 AM

    To: Kingdom Conquest

    Subject: Kingdom Conquest being used to steal

     

    People are having their iTunes accounts hacked by people using Kingdom Conquest. Most of these victims don't even have Kingdom Conquest on their iPhone or iPad.

     

    What are you doing to stop these thefts?

     

    Bill

    -------------------------------------------------------------------------------- ------------------

     

    I'm not sure what they mean by, "I would not keep my email and password online when logging onto iTunes each and every time. That is the easiest way to get it taken from you."

     

    Anyone have a clue what they're talking about?

  • by aircool,

    aircool aircool Dec 21, 2011 10:37 PM in response to Karen.R
    Level 1 (0 points)
    Dec 21, 2011 10:37 PM in response to Karen.R

    You say "within a day of speaking to Apple" did you actually get to speak to someone or was it via email (scripted messages).

     

    If you did speak to a human being can you post the number? The most frustarting thing is Apple provide zero support via the phone, tech support yes, but they will not comment on the hacking problem.

     

    I believe that Apple can do something, why do I get an email stating that my details have been changed then 5 seconds later a further email stating an unauthorised access has made a purchase and then within two minutes another email saying a further purchase has been made.

     

    Surely the most logical approach would be to prevent purchases until I confirm that it was indeed myself that changed my account, this system works with all other kinds of internet accounts.

     

    SIMPLES!!!

     

    Apple only want your money and don't give a tinkers toss about their customers.

  • by Karen.R,

    Karen.R Karen.R Dec 21, 2011 11:40 PM in response to aircool
    Level 1 (0 points)
    Dec 21, 2011 11:40 PM in response to aircool

    I actually sent a email then rethought that decision and called 800-APL-CARE (800-275-2273).    The person on the phone was great.  He was actually pleasent and helpful and not condecending.  Although later that day I got the response from my email stating the same thing that they would refund the money.    Mind you.  I only called to have them refund the money, I did not ask what apple was doing to stop this stuff as I know the person on the other end has nothing to do with it.  the people who really handle the getting rid of apps and such are not peole any of us would be able to talk to.        I was suprized how easy it was.  I gave them my 3 transaction numbers and it was not quick I was on for about a 1/2 hour but it was not frustrating.   

     

    They will give you support on a refund. They will not discuss a hacking issue with anyone.      There is no one to speak about that with.  Try sending Steve's replacement a email I hear he replys as well.    Truthfully there is no way to prove apple was hacked and there is no way to prove you were.    It is a loose/ loose situation.    Call and get a refund.  Not a hard thing to do.  Report the problem and hope they shut down the app. 

     

    Just remember all companys just want money.   I perosnally have gotten great support with apple.  But I will say we are big apple people and I am sure they can see that.  We are on a first name basis with the local apple store employees and have gone to every ipad/ iphone launch.    I will say my products have had problems but they always fix them promptly. 

  • by swede#1,

    swede#1 swede#1 Dec 22, 2011 8:03 AM in response to aircool
    Level 1 (0 points)
    Dec 22, 2011 8:03 AM in response to aircool

    I agree, it doesn't have to be complicated, a simple email from iTunes when you make a purchase ( or if someone else does ) where you have to confirm the purchase before it can be made is a simple fix.

  • by ajcaras96,

    ajcaras96 ajcaras96 Dec 22, 2011 4:28 PM in response to stereocourier
    Level 1 (0 points)
    Dec 22, 2011 4:28 PM in response to stereocourier

    My iTunes account was hacked this morning, two $45 charges and on $25 charges, along with a free charge of Kingdom Conquest.  I called Apple support and by 1:30 PM they had refunded my money in PayPal.  Great customer service by Apple.

     

    I am just mad that somehow somebody got my account info.  Kind of disheartening, considering when you pay $1200 for a computer you expect some better security than that.  Oh well, at least I got a refund

first Previous Page 65 of 131 last Next