Stolen iPhone, iCloud compromised, device removed from account, is my data safe?

As long as you have re-secured your account and you are the one in control then your data on your account is safe. If the thieves have access to your device and can get in then they may have access to some too.

Read this article if you think your Apple Account has been compromised. --> If you think your Apple Account has been compromised - Apple Support

Use the information in this article to check your Apple ID device list to find where you're signed in --> Review devices signed in to your Apple Account - Apple Support

Related materials:

Personal Safety User Guide

Personal Safety User Guide - Apple Support > open the Table of Contents and review the articles

An article with general information about security and your Apple ID --> Security and your Apple Account - Apple Support

Contact Apple for help with Apple ID account security. This page provides country-specific Apple Support contact information ➞ Contact Apple Support - Apple Support

Read this support article about what to do if a iPhone or iPad is lost or stolen -->

If your iPhone or iPad was stolen - Apple Support

- The Find My service described in the article is the only recovery feature Apple offers. It must be set up before the device is lost.

- “Don't remove the device from Find My, even if you remotely erase it. Removing the device from your Find My list removes Activation Lock, which will make it easier for the thief to unlock and resell your device.”

- Note that if you remotely erase your device as instructed in the above article, if you subsequently remove it from your account as in this article --> Review devices signed in to your Apple Account - Apple Support , then according to this article --> How to remove Activation Lock - Apple Support you remove activation lock from the device. Do not remove it from your account. If you do that then a finder or thief will have an unlocked device that can be used by another person.

- If a thief tricks you into “signing in” on a fake Apple site and you later receive a removal notification from Apple, read this entire thread: Stolen iPhone Find My notice - Apple Community

and Remove a device from Find Devices on iCloud.com - Apple Support Unfortunately if you have fallen victim to this there is no solution to recover your device or to prevent it from being reset by a thief.

unknowniPhonelover wrote:

Now my only concern is the photos and all my data.

If your phone was passcode-locked with a passcode that the criminals did not know and could not easily guess, they're unlikely to be able to get data off the phone. There are a million possible 6-digit passcodes. The thieves would only get 10 guesses before the phone went into a mode where the only way back in would be to reset and erase it.

Unfortunately, that's not the end of the story.

Since you fell for a "phishing" scam and gave the criminals your Apple Account credentials, they may have gotten into data synchronized or backed up to iCloud. From your description, it sounds as if the thieves had a week or so from the time that they got your Apple Account credentials to the time that you changed your password. There is no way of telling what they did, or didn't, view or copy during that week that they had access. Maybe the criminals "just" used your Apple Account credentials to remove Activation Lock, and maybe they went looking for data which might help them commit identity theft against you later, as well.

I mean the physical data on the phone when activation lock is disabled will it be available to them?