Apple ID Compromised

[Aikouka]

I checked my Gmail account this morning, and I found two e-mails from Apple stating...

Your Apple ID, <ID HERE>, was just used to download -KingdomConquest- from the App Store on a computer or device that had not previously been associated with that Apple ID.

If you initiated this download, you can disregard this email. It was only sent to alert you in case you did not initiate the download yourself.

If you did not initiate this download, we recommend that you go to iforgot.apple.com to change your password, then see Apple ID: Tips for protecting the security of your account for further assistance.

Regards,
Apple

I received some receipts from two payments made using PayPal for about $100 total.

So, it sounds like I need to file a dispute with PayPal about this, but is there an worth in talking to Apple? Based on what they wrote, it doesn't sound like they'll do anything about it if there was any wrongdoing.

I'm also curious how someone even managed to get my Apple ID e-mail/password combination. I've only been a member of two things that were hacked recently (Steam and MtGox), which the password may have been the same or similar, but the e-mail address was not the same.

On another note, I am really freaked out about how easy it is to change my Apple ID password. The information that I had to enter could be easily found on my Facebook page for Pete's sake! I had to enter two pieces of information and then enter a new password.

I appreciate any information that you can provide! ...especially if it's the home address of the punk that did it.

EDIT:

Also, is there a way to turn on a higher level of authorization? Kind of like how Steam requires you to enter a code from your e-mail address. I mean, Apple sent me a warning e-mail; so, can I make it so I cannot make a purchase until I perform an authorization step via an e-mail?

 

[Aikouka]

Called PayPal and got it all sorted out. Amusingly, the person didn't seem too surprised that it was an iTunes account as I guess they get a few of those.

Is there any recommendation to use gift cards only for purchasing things?

 

[alfa147x]

Not really. I would change email address that's associated with the account and a stronger password. It's nice to see paypal is helping you.

On another note, I am really freaked out about how easy it is to change my Apple ID password. The information that I had to enter could be easily found on my Facebook page for Pete's sake! I had to enter two pieces of information and then enter a new password.
[/COLOR][/COLOR]

You get to choose your question. I would try to change that too

 

[Aikouka]

You get to choose your question. I would try to change that too

Yeah, I ended up changing it. My biggest problem with those questions is that I worry that I'll forget the answer or get it wrong a lot because of variance in the answer. For example "where were you born?" ... do you just include the city or also the state? I've had that problem in the past, so I try and choose ones that I cannot have varying answers.

Unfortunately, now I have ~$13 of charges left on my account from this son of a bitch, and I can't even update my god damn apps until I pay Apple. :|

 

[alfa147x]

Yeah, I ended up changing it. My biggest problem with those questions is that I worry that I'll forget the answer or get it wrong a lot because of variance in the answer. For example "where were you born?" ... do you just include the city or also the state? I've had that problem in the past, so I try and choose ones that I cannot have varying answers.

Unfortunately, now I have ~$13 of charges left on my account from this son of a bitch, and I can't even update my god damn apps until I pay Apple. :|

Have you only contacted PayPal? I would contact Apple as well


°

 

[Aikouka]

Have you only contacted PayPal? I would contact Apple as well


°

Yeah, I already got things sorted out with PayPal. They're in the process of refunding the money, but they have to investigate it and such. I sent a support message to Apple a little bit ago about the lingering, unpaid order.

 

[KeithP]

Yeah, I ended up changing it. My biggest problem with those questions is that I worry that I'll forget the answer or get it wrong a lot because of variance in the answer. For example "where were you born?" ... do you just include the city or also the state? I've had that problem in the past, so I try and choose ones that I cannot have varying answers.

You never ever use factual information to answer those questions. Make up a nonsense word and always use it, regardless of the question, and never tell anyone what it is.

For example..
Where were you born? Windextoria
What is your mother's maiden name? Windextoria
What is the name of your favorite pet? Windextoria

...and so on.

-KeithP

 

[Aikouka]

You never ever use factual information to answer those questions. Make up a nonsense word and always use it, regardless of the question, and never tell anyone what it is.

For example..
Where were you born? Windextoria
What is your mother's maiden name? Windextoria
What is the name of your favorite pet? Windextoria

...and so on.

-KeithP

I've never seen anyone do that before... that's interesting. It sort of becomes a secondary, but slightly easier password at that point.

 

[beginner99]

You never ever use factual information to answer those questions. Make up a nonsense word and always use it, regardless of the question, and never tell anyone what it is.

For example..
Where were you born? Windextoria
What is your mother's maiden name? Windextoria
What is the name of your favorite pet? Windextoria

...and so on.

-KeithP

Just wanted to post this. I use a non-sense word for all those stupid secret questions. also makes it easy to remember if you always use the same word.

 

[lokiju]

I had my Apple ID account "hacked' on an account I had set up with the iPhone 3G came out but wound up using a different account from that point forward.

Never linked it to my bank account thankfully and after realizing it had happened I tried to reset the password to something super secure and Apple I guess saw the activity and locked the account out.

Had to email them and explain what happened and in a day or so it was all resolved.

I use that non-primary account for stuff like my work computers iTunes activation so I can get stuff like album art now.

 

[Aikouka]

I'm hoping Apple will resolve the final unpaid order. Luckily, it's only $13, so if I have to pay it, it's not that bad. I received a response back from Apple today, which indicated that they had been in contact with PayPal over the dispute. There was a bit of an amusing part to it...

However, there is still an outstanding balance of $13.99 due to payment not being obtained on <order number here>. I recommend contacting PayPal to determine why your payment was declined. As soon as you pay for that order, you'll be able to resume updating your apps and purchasing with your iTunes Store account.

There being a $13.99 outstanding order comprising of the same Kingdom Conquest CP in-game purchases (and my free game downloads from later in the evening) is exactly what I was trying to convey in my original message. That fact seems to have been lost in translation, so this might take a little longer to finalize. I just hope I don't miss out on any good sales or free apps!