Apple account signed into from China

[MrRockliffe]

Just had a notification on my iPhone to say my account has been signed into from China, and I was promoted to authenticate the login.

It’s a password I don’t use for any other account, and it isn’t in any known data breaches.

I’ve now changed it, but I always wonder how this happens. The only devices which sign into this account is my iPhone and watch.

 

[MrRockliffe]

Enable 2FA.

It is

By signed in, I mean it was a 2FA notification. I.e. they had the correct password

 

[MrRockliffe]

If that is the case then i'd be rather worried.

I'd start checking all devices you use, might even be worth a password refresh at this point. And making sure all sites that support 2FA are enabled.

I guess it depends on the uniqueness of the passwords. If they were unique then I'd just change the Apple ID and move on, otherwise I'd be panicking.

So after some digging, the password was used on two other sites I can find, but the email wasn’t.

In fact, the email is only used on two services, Apple and one other. Though they’re different passwords.



Just find it quite strange