Hackers leak 1 million Apple IDs - and now I have an unauthoried download on my iTunes acct!!

keewee01

1737 posts

Uber Geek

Trusted

#108803 5-Sep-2012 19:57

Hackers leak 1 million Apple IDs allegedly stolen from FBI laptop

Recommend people go change their iTunes/Apple passwords as people are using these details!!!

Just had some emails saying someone had changed details on my account and then purchased a game!!

Certainly wasn't me.

Fired up iTunes and sure enough - there is a game there waiting to download!

How on earth do I contact Apple to report this!??

If you have an iTunes account go to it and change your password a.s.a.p.!!!

1 | 2 | 3

BDFL - Memuneh
79270 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#681992 5-Sep-2012 20:06

Keep trusting Apple and partners...

Seriously change the password and make sure the email is correct as well.

keewee01

1737 posts

Uber Geek

Trusted

#681995 5-Sep-2012 20:09

freitasm: Keep trusting Apple and partners...

Seriously change the password and make sure the email is correct as well.

Yep - changed password as soon as I could.

Email address was still correct, so not sure what they were able to achieve. They certainly got access to some of my account details and supposedly changed the name on the account, and they purchased and downloaded a game.

Wow - no wonder Americans are paranoid about the FBI!!!

keewee01

1737 posts

Uber Geek

Trusted

#682005 5-Sep-2012 20:25

WOW! Apple have already taken action on my support request to them!!

Unfortunately they've disabled my account as part of this, so I need to work out what to do next, but they've said they are refunding the amount that was spent even thought it is an exception to the iTunes Store Terms and Conditions, which state that all sales are final. (their words)

Full response below

Dear Craig,

Thank you for contacting the iTunes Store Customer Support. This is Riyaz here.

I understand that you are reporting unauthorized purchases in your account "XXXX". I know the might be upsetting for you

To prevent further purchasing, I have disabled your account.

We have issued a refund for the items purchased without your permission. The decision to refund these items was made after a careful review of your case. Please note that this is an exception to the iTunes Store Terms and Conditions, which state that all sales are final. You will see 24.99 NZD added to your store credit balance within 24 hours. You may need to sign out of the iTunes Store and then sign back in before you see the credit in your account.

The security of your account is important to Apple. If you would like to enable your account, we will manually reset the password for you and include helpful information for when you reset the password again yourself. It is recommended that you reset the password even if you wish to leave your account disabled.

If you would like to request that your iTunes Store account be enabled, please reply to this email.

To increase the security of your account I highly recommend that you follow the suggestions outlined in this article:

iTunes Store: Best practices for protecting the security of your account
http://support.apple.com/kb/HT4156

I hope this email has helped resolve your concern. Please feel free to get back to me for any further clarifications or assistance, I would be happy to help.

Thank you for being a valued iTunes Store customer. Have a wonderful day! .

Sincerely,

Riyaz
iTunes Store Customer Support
http://www.apple.com/support/itunes/ww/

keewee01

1737 posts

Uber Geek

Trusted

#682007 5-Sep-2012 20:31

So it looks like these little w@nk5r$ used the stolen details to download a free game from iTunes and to then make an in game purchase of $24.99. Great security Apple! And even better security FBI - why were the FBI in possession of my account details in the first place!?????????

If you have an iTunes account go to it right away and change your password!

Behodar

10504 posts

Uber Geek

Trusted

Lifetime subscriber

#682014 5-Sep-2012 20:53

Incredible. I'd heard about the FBI breach/leak but didn't know whether it included non-US accounts or not. Now I know.

I've checked both of my accounts and there are no unauthorised purchases, but I'll keep my eye on them.

gzt

17122 posts

Uber Geek

Lifetime subscriber

#682015 5-Sep-2012 20:55

If you have done nothing wrong you have nothing to fear. That myth is well and truly busted isn't it.

1080p

1332 posts

Uber Geek
Inactive user

#682019 5-Sep-2012 21:11

Er, how did they gain access your Apple account exactly? That hack released the Apple iPhone UDID list. Not your password or any other personal information.

"As proof, the hackers released a stripped-down version of that file that only contained 1 million UDIDs, with associated Apple Push Notification Service tokens and device names. The other personal data that accompanied many of the UDIDs was intentionally removed, the hackers said."

I strongly believe this hack and your account compromise are completely unrelated.

Tradepub

Free professional, reference and technical white papers (affiliate link).

richms

28175 posts

Uber Geek

Trusted

Lifetime subscriber

#682054 5-Sep-2012 22:19

Just be aware that the "helpful information for when you reset the password again yourself" is some of those retarded easy to socially engineer "secret" questions that many people found their iDevices demanding randomly a while ago after a password change.

So either enter gibberish in them and record them down like you would a password or tell apple they have no business demanding that personal information about you and refuse to give it to them.

I know that if you call apple support and abuse them about your iPad suddenly wanting personal information that you never were told you would have to provide when you bought it they have some way of bypassing it on their end allowing you to purchase again on the iPad.

Richard rich.ms

mattRSK

822 posts

Ultimate Geek

Trusted

#682068 5-Sep-2012 23:11

keewee01: So it looks like these little w@nk5r$ used the stolen details to download a free game from iTunes and to then make an in game purchase of $24.99. Great security Apple! And even better security FBI - why were the FBI in possession of my account details in the first place!?????????

If you have an iTunes account go to it right away and change your password!

Thanks for that, I changed it. Sorry you lost that money.

mattwnz

20155 posts

Uber Geek

#682074 5-Sep-2012 23:25

You have to wonder why that letter from itunes states their terms and conditions clause

Please note that this is an exception to the iTunes Store Terms and Conditions, which state that all sales are final.

That would imply that this is an exception and they don't usually refund when there has been fraudulent use on the account? Of cause they would, or there would be a credit card charge back. I just don't understand why they needed to mention that clause.

turnin

509 posts

Ultimate Geek
Inactive user

#682079 5-Sep-2012 23:40

Yes why were your details with the fbi. Perhaps you follow assange or dot com or did you download something.:)

Kyanar

4089 posts

Uber Geek

ID Verified

Trusted

#682087 6-Sep-2012 01:22

Perhaps actually check the file to see if your details were in it? Most likely they weren't and the incidents are unconnected. Even if your details were in there (unlikely) it's not enough detail to compromise your account. This is the entirety of a line of the file (with some x's whacked in there):

'ca57e38dd4e6dxxxxxxxxxxxxxxd8b412cf7b6','3b55b05a5dc25b18fxxxxxxxxxxxxxxxac7ed847fa3168f82729c4ac6ff5d4','Mat\'s iPhone','iPhone'

Behodar

10504 posts

Uber Geek

Trusted

Lifetime subscriber

#682102 6-Sep-2012 07:08

mattwnz: I just don't understand why they needed to mention that clause.

I guess it's some legal policy where they need to tell you that they're breaking the agreement that you "signed". I'm sure people would be upset if Apple went in the other direction and broke the agreement in a way that negatively affects the customer.

1080p

1332 posts

Uber Geek
Inactive user

#682121 6-Sep-2012 08:44

Have yo asked Apple for the IP that last logged into your Apple account?

freitasm

BDFL - Memuneh
79270 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#682130 6-Sep-2012 09:03

If that was a New Zealand company they would probably not answer saying it would be a breach of privacy...

/irony

1 | 2 | 3

News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00

eero Pro 7 Review
Posted 23-Jul-2025 12:07

BeeStation Plus Review
Posted 21-Jul-2025 14:21

eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01

WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32

RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26

Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24

Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05

Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01

Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01

Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22

Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46

Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42

D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34

Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15

Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.