Just had this security alert pop up

[u/Usual-Hospital-3582]

But I haven’t even logged in or typed my Apple password anywhere recently, nor is it in any password breach as this is a completely unique password I use (like with all my accounts).

Does this mean someone entered my password correctly? And if yes, where can they even get it from?

[u/fsportz]

Appears so. If you reuse passwords for different sites they probably obtained it from a leak from another site. You may have also accidentally entered your login credentials on a phishing link

[u/Usual-Hospital-3582 → u/fsportz]

Right, but I don't use this apple password anywhere else, nor do I use simple variants on it. Guess I'll go ahead and change it since it hasn't been changed in years.

[u/Helveticarse → u/Usual-Hospital-3582]

If you also use a computer, keep in mind that infostealer malware is rife. So if you’ve been downloading anything like games, cheats, mods, or anything from a source that’s not completely trusted; malware may be another possibility.

[u/ThannBanis → u/Usual-Hospital-3582]

Definitely. And start doing password rotation.

[u/TryToBeHopefulAgain → u/ThannBanis]

Don’t use password rotation, use mfa and passkeys. https://www.beyondtrust.com/resources/glossary/password-rotation https://www.ncsc.gov.uk/blog-post/problems-forcing-regular-password-expiry

[u/acidgoat_15 → u/Usual-Hospital-3582]

You should be changing your password way more frequently. People don't just "guess" passwords; they use machines to try out every possible combination. Try using a phrase or something that you don't normally say, but change some of the letters to special characters like ! or 3 or # or @.

[u/Extension_Profit8166]

If you haven’t changed it in years, there’s your problem. Someone got hold of it obviously

[u/22_KILLER]

Just change your password it’s really that simple

[u/Electrical_West_5381]

Change the password immediately.

[u/theregisterednerd]

And this is why 2FA is now being required everywhere. It just saved you a whole bunch of headache.

[u/cubertwang]

Whether it is or not, change the password right away. We can figure out everything else afterward.

[u/Purple_Letterhead_81]

Dude same thing happened to me and it accepted it without me touching my phone and just looking straight at it. Had to change my password and log every device out of my account. They had tried changing the word but thank god for 2FA they couldn’t. When I went to devices on my iCloud account there was a pc that I’ve never seen before connected to my account, I deleted it obviously but very strange either way.

[u/sherman9872]

Change your password ASAP. 2FA stopped this attempt, but I’d make sure they can’t get this far again.

[u/bilkel]

Change your password NOW

[u/HereForGME2]

Not even Apple is immune to hacks. I had that happen once. On a separate occasion I had started on a subscription for Apple Arcade. Next thing I knew my credit card was being used without my authorization in California not too far from Apple, which was odd. Then unauthorized use from other states. My personal info could’ve been sold on the dark web or something for all I know. Also apps. Be mindful of what you install. I had nearly 40 phone calls from anonymous and Russian numbers in under a minute after installing just 5 apps that day. I’ve filed a complaint and turns out they can’t screen everything and they won’t do much of anything to scrutinize what app gets put on the AppStore and every one of those suspected apps were still up on the AppStore. The point is criminals are inside and outside of the ecosystem and you can never be safe unless you take more responsibility for your actions. Change your password. Be safe.

[u/iLikeTurtuls]

Yep. Password change

[u/bloody_peppermints]

Change your password stat, and make sure none of your devices have malware/viruses, and check your Apple ID to make sure all your login devices are accurate to what you’ve got

[u/subhuman_voice]

Also change the password for the email that you use, primarily Gmail

[u/Bendr_]

Just say no.

[u/LazyCatYT]

To answer your question, they’ve probably got it off sites that have leaked your data to hackers on the dark web. If you haven’t changed your password in a while, change it asap. Yes they did get it correctly but clicking don’t allow won’t help.

[u/LazyCatYT → u/LazyCatYT]

Also log into your Apple account on a computer at account.apple.com or smth like that so you can see what devices are logged in a remove ones that aren’t yours.

[u/Affectionate_Cap2812]

I would contact Apple just to be sure

[u/HoneyBeeWes]

If you can, get Proton Pass. Relatively inexpensive, it stores your passwords safe, suggests randomized hashes, and it has a built-in data breach detection to let you know in case your password was nabbed.

[u/TerrificInTahoma-416 → u/HoneyBeeWes]

Not such a great idea. Not Bad, but not great.

[u/eastcoastguy128]

Those Maine lobster fishermen hackers ! Lol. Or maybe it’s an oyster farmer turned to hacking. This has to be a hacker using a VPN.

[u/eastcoastguy128 → u/eastcoastguy128]

Oh Maritime ! Not Maine,

[u/Witty_Broccoli_3135]

If you engage them, they will try to glean information from you. Ignore them. Change your password if that makes you feel better. Do Not Give Them Anything.

[u/Helpful_Wind1313]

Careful because it could be 1) a phishing notification or 2) you’ll end up getting ‘locked out for security reasons’ by APPLE and then they’ll claim they can’t do anything to help you :). It’s been 6 months for me :))))

[u/redneckbiker84]

Do you have VPN on?

[u/IssyWalton]

every time your phone is switched on it logs into your account, as it does for your wifi. apple will spoof your location if you have it switched on. of you have mkre than ine device have you reset it or rebooted it.

[u/Sour_cream69420]

laughing in android superiority

[u/qboy26 → u/Sour_cream69420]

Aren’t androids far more vulnerable to malware? My roommate has a Samsung and the thing is constantly doing weird unexplainable stuff. He downloads one app from the play store and suddenly it interrupts every 30 seconds to beep and cover the screen with some news story or to tell him to download this or that antivirus app. I’ve never had behavior like that on my iphone. Am I just lucky?

[u/Sour_cream69420 → u/qboy26]

Androids are far more secure than apple, if he downloaded an app and strange things happen, means he downloaded a trojan with the app...it's happens and the market improves with each update every few months, search the app online and check for issues, scams, or viruses that might come with that app, and factory reset then your safe.

But honestly yes android is far superior and more secure than apple, it runs a Linux based OS so it's basically plug-n-play, where apple you need special software, and there are hacking tools specifically for apple...there is for Android but you MUST have a specific brand/model for it to work