Apple account signed into from China

MrRockliffe · 3 Mar 2022 at 12:33

Just had a notification on my iPhone to say my account has been signed into from China, and I was promoted to authenticate the login.

It’s a password I don’t use for any other account, and it isn’t in any known data breaches.

I’ve now changed it, but I always wonder how this happens. The only devices which sign into this account is my iPhone and watch.

Feek · 3 Mar 2022 at 12:41

Enable 2FA.

MrRockliffe · 3 Mar 2022 at 12:45

Feek said:
Enable 2FA.

It is

By signed in, I mean it was a 2FA notification. I.e. they had the correct password

Semple · 3 Mar 2022 at 12:48

MrRockliffe said:
It is

By signed in, I mean it was a 2FA notification. I.e. they had the correct password

If that is the case then i'd be rather worried.

I'd start checking all devices you use, might even be worth a password refresh at this point. And making sure all sites that support 2FA are enabled.

uvarvu · 3 Mar 2022 at 13:03

I guess it depends on the uniqueness of the passwords. If they were unique then I'd just change the Apple ID and move on, otherwise I'd be panicking.

MrRockliffe · 3 Mar 2022 at 14:35

Semple said:
If that is the case then i'd be rather worried.

I'd start checking all devices you use, might even be worth a password refresh at this point. And making sure all sites that support 2FA are enabled.

uvarvu said:
I guess it depends on the uniqueness of the passwords. If they were unique then I'd just change the Apple ID and move on, otherwise I'd be panicking.

So after some digging, the password was used on two other sites I can find, but the email wasn’t.

In fact, the email is only used on two services, Apple and one other. Though they’re different passwords.

Just find it quite strange