Hacking Worm Holes in iTunes
For more than a year, iTunes users have been reporting on online Apple customer forums that their accounts have been hacked, their gift cards spent, their PayPal accounts used or their store credit exhausted.
One typical forum complaint, from a user identifying themselves as MacAurora: "I was hacked today for almost $50 in Apple gift card money. First someone gained access to my account and 'downloaded' the free Kingdom Conquest app at 2:45 a.m. when I was asleep, and then bought almost $50 worth of In App Purchases from SEGA Corporation. SEGA says I should complain to Apple and ask for a refund. Apple says it's not responsible for In App Purchases."
Most of the amounts stolen are at the low end, ranging from a few dollars to about $500. In most instances, Apple has agreed to restore the lost funds, as a "one-time exception to our sales policy". The company will not comment on whether they are working on a permanent fix.