Yesterday, sometime after 4:12pm Pacific, I stopped receiving iCloud email. I thought perhaps iCloud mail was down so didn't do anything about it.

After not recieving email all night, I finally logged in to my iCloud account to find someone had somehow logged on to my iCloud account and set all my messages to be forwarded, then deleted, to a gmail.com address.

I immediately removed the forwarding and changed my password, and security questions, but what else should I do. I have the email address they were being forwarded to. I don't think any logins to web sites or services were compromised, but I'm a bit concerned that this even happened!

My password was generally strong, though the new one is significantly longer and more complex.

~A

What?!!! Were you at a public place?

Nope. I now found the individual's login to my account in the trash in email:

Your Apple ID was used to sign in to iCloud via a web browser.
Date and Time: September 30, 2015, 5:39 PM PDT
Browser: Chrome
Operating System: Windows

I was at an event for work at that time. While it was a public place, I never took my phone out of my pocket.

Do I sent the person and email and tell them I'm reporting this to authorities? I just want my lost emails back.

Quote
tahoedrew
Nope. I now found the individual's login to my account in the trash in email:

Your Apple ID was used to sign in to iCloud via a web browser.
Date and Time: September 30, 2015, 5:39 PM PDT
Browser: Chrome
Operating System: Windows

I was at an event for work at that time. While it was a public place, I never took my phone out of my pocket.

Do I sent the person and email and tell them I'm reporting this to authorities? I just want my lost emails back.

Report them regardless. I'm sure you're emails can be retrieved on another device right? This is fairly outrageous. I'm mad "for" you.

Wow, that seems really random?

---

Edited 999 time(s). Last edit at 12:08PM by jdc.

Find him. Track him. Kill him.

(or at least knee-cap him...)

---

Paul F.
-----
A sword never kills anybody; it is a tool in the killer's hand. - Lucius Annaeus Seneca c. 5 BC - 65 AD
----
Good is the enemy of Excellent. Talent is not necessary for Excellence.
Persistence is necessary for Excellence. And Persistence is a Decision.
--

--

--
Eureka, CA

Enable 2-factor authentication on your iCloud account (and all others - gmail, microsoft, facebook, twitter, yahoo etc):

[gigaom.com]

[support.apple.com]

Yes, 2 factor whatchamacallit. Then do as Paul said, stick sharp sticks under the jerks's fingernails.

---

That old man - he don't think like no old man...
Now I wouldn't want to be within 400 - 500 yards of one of them nuclear bombs when it goes off! WW1 Vet Old Man
"He's pinned under an outcropping of rock. Lucky for him, the rock kept the dirt from burying him alive."
If idiots could fly, this place would be an airport. And I'd be a TSA agent.
A bonified member of The Mystic Knights of The Sea, George P. Stevens, President. Andy Brown, Treasurer, Algonquin J. Calhoun, Legal Consultant.



Edited 1 time(s). Last edit at 10/01/2015 12:28PM by GuyGene.

Quote
tahoedrew
Nope. I now found the individual's login to my account in the trash in email:

Your Apple ID was used to sign in to iCloud via a web browser.
Date and Time: September 30, 2015, 5:39 PM PDT
Browser: Chrome
Operating System: Windows

I was at an event for work at that time. While it was a public place, I never took my phone out of my pocket.

Do I sent the person and email and tell them I'm reporting this to authorities? I just want my lost emails back.

A key logger could have gotten it weeks ago. Or someone knows the answers to your security questions.

---

Saint Cloud, Minnesota, where the weather is wonderful even when it isn't.

Sorry, trying not to sound preachy...

Do you reuse your username and/or password on multiple accounts? This can make hacking simpler for the bad guys.

Try to use a unique username & password everywhere. Start using 1password or any other password managers to keep track.

Quote
bhaveshp
Sorry, trying not to sound preachy...

Do you reuse your username and/or password on multiple accounts? This can make hacking simpler for the bad guys.

Try to use a unique username & password everywhere. Start using 1password or any other password managers to keep track.

That's all well and good but most sites nowadays use your email as the username. I can't remember when I registered somewhere that didn't. While I still generate strong passwords with 1Password I cannot come up with a new email address for every site I register with.

---

Quote
bazookaman
That's all well and good but most sites nowadays use your email as the username. I can't remember when I registered somewhere that didn't. While I still generate strong passwords with 1Password I cannot come up with a new email address for every site I register with.

Agreed, for sure. But I try to mitigate even this with separate email addresses:

- Low priority - forums, random web accounts
- Med priority - shopping, often used web services,
- High priority - Financial accounts
- Social media, personal email

Quote
tahoedrew
My password was generally strong, though the new one is significantly longer and more complex.

correct horse battery staple?

---

It is what it is.

Quote
N-OS X-tasy!

Quote
tahoedrew
My password was generally strong, though the new one is significantly longer and more complex.

correct horse battery staple?

Exactly

---

Edited 999 time(s). Last edit at 12:08PM by jdc.

Quote
bhaveshp

Quote
bazookaman
That's all well and good but most sites nowadays use your email as the username. I can't remember when I registered somewhere that didn't. While I still generate strong passwords with 1Password I cannot come up with a new email address for every site I register with.

Agreed, for sure. But I try to mitigate even this with separate email addresses:

- Low priority - forums, random web accounts
- Med priority - shopping, often used web services,
- High priority - Financial accounts
- Social media, personal email

I get 255 aliases at my current paid level with Fastmail. I do basically the same thing but have one for entering radio station givaways, one just for Facebook, one just for Craigslist, etc.

Double post by forum???

---

gl @ Dana Point, CA



Edited 1 time(s). Last edit at 10/01/2015 07:59PM by GeneL.

I leave my email on my "provider's" server. That way I can log in to my account and read any older emails that I might have missed. I have plenty of room left even after saving years of emails.

Check your account on your provider's website. That should do it, unless you have it set to delete from the server when you delete from your mail app.

Is this helpful?

---

gl @ Dana Point, CA