Yesterday, we posted about the wave of Find My iPhone ransom hacks reported in Australia. From the post:
There is conjecture that the hackers have access to some recently stolen eBay passwords and that the victims have the same password on both eBay and for their Apple ID. Regardless of whether this is true or not, this is a pointed example of why you should not reuse passwords.
This morning, Apple made a statement that lent some credence to the password reuse theory:
Apple takes security very seriously and iCloud was not compromised during this incident. Impacted users should change their Apple ID password as soon as possible and avoid using the same user name and password for multiple services. Any users who need additional help can contact AppleCare or visit their local Apple Retail Store.
Also, the ransom attack affected customers in New Zealand, Canada and the US, as well as in Australia.