What You Need to Know about the iCloud Security Threat

Many technology news outlets have been reporting about the possibility of a looming security threat to Apple iCloud accounts.

What we know so far:

We know that a London-based hacker group, calling itself the “Turkish Crime Family,” has claimed to have access to 250 million Apple iCloud accounts. The hackers are threatening to reset the passwords on those iCloud accounts and remotely wipe iOS devices if Apple doesn’t pay a ransom by April 7. Those demands have since changed and increased. For its part, Apple has said it hasn’t been hacked; the company said the data came from “previously compromised third-party services,” and that it is “actively monitoring to prevent unauthorized access to user accounts.” That seems to tie in with what the hackers said in an email to several media outlets; the hackers denied any direct breach of Apple systems.

The Turkish Crime Family has released the account credentials for 54 iCloud accounts and media sources have confirmed that in fact the usernames and passwords associated with some of those 54 accounts are legitimate.

What should you do?

If you use an iOS device, or have an iCloud (Apple Store) account, ProviNET is encouraging users to take proactive measures prior to April 7 and reset your account password. You may do this easily by visiting https://appleid.apple.com/

When you change your password, setup a secure password using a combination of alpha-numeric characters as well as symbols. Having a more complex password means having a more secure password. Also – don’t use the same password that you have used for other online accounts, especially any work-related accounts.

Finally, consider turning on two-factor authentication for your Apple account. Enabling two-factor authentication will give you additional peace of mind that only you are able to login to your account and that your Apple identity is not being compromised.

For assistance ensuring that your iCloud account and iOS device are secure, please contact the ProviNET Service Desk by calling 708-468-2001.