Archive. This is an archive of the Apple Support Community. Discussions are being restored and soon you will be able to read and post here again.

Stolen iPad 9th Generation – Apple Account Compromised Using the Device Passcode


Subject: Stolen iPad 9th Generation – Apple Account Compromised Using the Device Passcode


Hello,


My 9th-generation iPad was stolen. The person who stole it knew the device passcode and used it to change my Apple Account password, disable Find My, and erase the device.


I discovered what had happened through an email from Apple notifying me that my Apple Account password had been reset.


This incident raises serious concerns about Apple's security system. Is it really acceptable that someone who knows your device passcode can take control of your Apple Account, disable Find My, and erase your device?


Why isn't an additional security measure, such as Touch ID, SMS verification, or another form of authentication, required to access or change sensitive Apple Account settings? Knowing the device passcode should not be enough to compromise an entire account so easily.


When I tried to regain access to my account, I was also given a 24-hour waiting period. I was only able to access my account hours later after finding and using another iOS device.


I have the stolen device's serial number and intend to initiate legal proceedings. However, I would like to know whether Apple can provide any assistance in this situation.


My questions are:


- Can the stolen device's serial number help Apple locate the device or assist with account recovery?

- What security measures can I take to prevent someone who knows my device passcode from taking over my Apple Account?

- Can Apple help with the unauthorized disabling of Find My and the erasure of my stolen device?

- How can I formally report what I consider to be a serious security vulnerability?


If anyone has experienced a similar incident or received assistance from Apple, I would appreciate hearing about your experience.


Thank you.

























2 replies

"Stolen iPad 9th Generation – Apple Account Compromised Using the Device Passcode: This incident raises serious concerns about Apple's security system. Is it really acceptable that someone who knows your device passcode can take control of your Apple Account, disable Find My, and erase your device?[...]"

-------


Troubleshooting a Hacked Account:

Keeping you account secure is YOUR responsibility, as an Apple Customer. This is something you would have agreed to in the Terms & Conditions upon open an Apple Account.


I. Getting In to your Apple Account:

You need to get into your Apple Account. So, contact Apple Support. If you have a hacked iCloud account, then ask the Apple Rep if they can help you add Two-Factor Authentication. Ask them to assist you with changing your Apple Account’s phone number to what it should be. Important: Perform a trial-&-error login session, prior to ending the call.

Apple Contact Info:


II. Secure your Info:

If concerned for device access, then (A)verify your devices, and (B)secure your account. Open a new eMail address and use that for your Apple Account.


1. Verify your Devices:

Verify that all devices are logged in to your account, by using this link: Check your Apple ID Device List to See where you're Signed in - Apple Support

then...

2. Modify your Credentials:

Having been stollen, someone lily has your credentials. So, by all means, modifying them.


III. Report Items to Apple:

So, report phone and messages and phone call's content to Apple and others (law enforcement and whomever else).

Use my User Tips:

"Stolen iPad 9th Generation – Apple Account Compromised Using the Device Passcode:

-------


Q1. "Can the stolen device's serial number help Apple locate the device or assist with account recovery?"

A1. If you have an original proof of purchase (i.e. receipt), then that might prove a few things, from ownership.


Q2. "What security measures can I take to prevent someone who knows my device passcode from taking over my Apple Account?"

A2. Secure your Account, as mentioned in my previous reply.


Q3. "Can Apple help with the unauthorized disabling of Find My and the erasure of my stolen device?"

A3. Give Apple a call, and see if they can assist you with this. Without access to it, they would be able to see it.


Q4. "How can I formally report what I consider to be a serious security vulnerability?"

Since these is no direct feedback section for Apple Account, use the iCloud Feedback section to provide your thoughts and pings on this. See my User Tip: Apple ID How to Provide Apple Feedback for this Category - User Tip

A4. Provide your Feedback to Apple:

Do your Part: Provide Apple with feedback on this, recommending that they make things a bit different, and how you think this will help other out these..  Apple may not get back to you directly, but the more feedback they receive on this, the more they will know what thieir customers prefer and what to include in updates to come.

  1. Go Here: Feedback - iCloud - Apple
  2. Select: "Find My" for the "Feedback Type"
  3. Comment: that you want things to be different, and how. Include the URL of this thread.
  4. Proceed from there as necessary