Apple Developer Website Hacked: Developer Names, Addresses May Have Been Taken

developerIn an email to developers today, Apple revealed that its Developer Center website was breached by unknown hackers and was taken offline last Thursday as a precaution.

The company notes that sensitive personal information was "encrypted and cannot be accessed" but that Apple's engineers "could not rule out the possibility" that developer names, mailing addresses and email addresses may have been accessed.

Apple says it is overhauling its developer systems, updating software and rebuilding the entire developer database. There is no indication of when the site will be back up, other than the company saying it expects to have it up again soon.

Apple Developer Website Update

Last Thursday, an intruder attempted to secure personal information of our registered developers from our developer website. Sensitive personal information was encrypted and cannot be accessed, however, we have not been able to rule out the possibility that some developers’ names, mailing addresses, and/or email addresses may have been accessed. In the spirit of transparency, we want to inform you of the issue. We took the site down immediately on Thursday and have been working around the clock since then.

In order to prevent a security threat like this from happening again, we’re completely overhauling our developer systems, updating our server software, and rebuilding our entire database. We apologize for the significant inconvenience that our downtime has caused you and we expect to have the developer website up again soon.

Apple told Macworld that the breached server was not associated with any customer information and that all personal information is encrypted -- additionally, the attackers did not get access to any app code or to any servers where app information is stored.

Top Rated Comments

(View all)
Avatar
88 months ago
News reporting would go something like this...

Of the Apple hacking, which didn't really affect much, and is actively being resolved:

Apple completely compromised!


Of the Android master key exploit which exposes 900 million phones to malware/viruses and more, and has no chance of ever being resolved:

<chirp><chirp><chirp>

Score: 43 Votes (Like | Disagree)
Avatar
88 months ago
I'm not normally one to step up and defend Apple, but in this case, sadly this is how things are now.

Facebook has been hacked, Twitter has been hacked, Sony has been hacked, Zendesk has been hacked, Microsoft has been hacked, Ubuntu has been hacked, numerous government websites have been hacked etc. etc.

It's simply next to impossible these days to guarantee security in the millions of lines of code that constitute modern Operating Systems and the dozens of processes that run on them. Someone will find a vulnerability sooner or later and exploit it. The only thing you can do is make it as hard as possible for them, and store your data in as safe a manner as possible with strong encryption (and hashing for passwords).

This was going to happen sooner or later, and while it looks bad for Apple, it's a fact of life that there are people out there for whom hacking is their job and how they earn their money. The only way to secure your data from hacking, is not to put it on the internet. End of story.
Score: 26 Votes (Like | Disagree)
Avatar
88 months ago
oh dam

this will hit news stations like a frenzy, android users are gonna gloat
Score: 18 Votes (Like | Disagree)
Avatar
88 months ago

Travel back in Time and stop this NOW!


Fixed point in time it cant be changed! ITS ALL JUST WIBBLY WOBBLY TIMEY WIMEY
Score: 11 Votes (Like | Disagree)
Avatar
88 months ago
Do developer names, mailing addresses and email addresses, not constitute sensitive?
Score: 10 Votes (Like | Disagree)
Avatar
88 months ago

Why didn't you do this as routine maintenance to prevent anything like this from happening to this severity? Sure you can't make it 100% immune from attacks, but you could make the data 98% safe.

It seems you don't have much experience building secure websites. What you do is building security in depth. You make sure nobody can get in, and you make sure there's nothing to see if somebody gets in. You always assume that someone _might_ figure out how to get around one defense, and have a second defense in place. That's what Apple did, and it worked. Most likely the attacker didn't get access to anything, and what there was to access was encrypted.

If you knew of ways to get past one of the defences, you would of course fix it. Somebody got in, which means they used a method that wasn't anticipated and couldn't have been fixed. Because of "security in depth", that breach didn't gain the attacker anything, but now Apple knows what they did and makes the necessary changes. It is quite possible that Apple's security developers have from time to time found possible attacks and quietly fixed them; you wouldn't notice it.

----------

Why didn't these hackers go after the NSA? They already have all Apple Dev Center data and lots more..

That's of course nonsense, and you know that. And if it was true, you wouldn't go after the NSA. You go after someone who can't lock you away for the rest of your sad life without a court case.


this shows that apple is no longer reliable and it may affect stocks greatly.
There goes the public trust...Apple....

Nonsense. There's security in depth in place. Someone got past one defense, was promptly detected, and other defenses stopped him. Exactly how it is supposed to work. Public trust is also based on how a company handles problems: Apple handled it by immediately shutting down the site, which is inconvenient, but the absolutely safe thing to do, and they promptly informed the affected people about what was going on. Others companies would have kept the site running, hoping that nothing else happens. That's the companies you can't trust.
Score: 9 Votes (Like | Disagree)

Top Stories

Leaker Claims New 13-inch MacBook Pro Coming as Soon as Next Month

Monday April 6, 2020 2:56 am PDT by Tim Hardwick
Apple will announce a new 13-inch MacBook Pro in May with the codename J223, according to a rumor shared by YouTuber and leaker Jon Prosser. Note: it’s a refresh to the current 13” So the bigger 14” display upgrade is a big possibility— Jon Prosser (@jon_prosser) April 4, 2020 Analyst Ming-Chi Kuo has said Apple plans to release new MacBook Pro and MacBook Air models with scissor keyboards ...

'Leaked' Images Allegedly Show iPhone 12 With Smaller Notch, Rear Camera Redesign, and Home Screen Widgets

Tuesday April 7, 2020 4:28 am PDT by Tim Hardwick
Two images shared on social media this morning are currently stoking speculation about possible hardware redesigns coming to the iPhone 12 and the potential introduction of Home screen widgets in iOS 14. Shared by Twitter user Fudge (choco_bit), the images depict a front and rear graphical representation of a smartphone with interface elements on the screen, suggesting it came out of a...

Apple Releases iOS and iPadOS 13.4.1 With Fix for FaceTime Bug

Tuesday April 7, 2020 10:06 am PDT by Juli Clover
Apple today released iOS and iPadOS 13.4.1, minor updates that come two weeks after the release of iOS and iPadOS 13.4, major updates that introduced iCloud Folder Sharing, a new Mail toolbar, trackpad support for the iPad, and more. The iOS and ‌iPadOS‌ 13.4.1 updates are available on all eligible devices over-the-air in the Settings app. To access the updates, go to Settings > General...

More References to Apple's Upcoming Low-Cost iPhone Appear Online

Monday April 6, 2020 4:38 am PDT by Tim Hardwick
Further references to Apple's upcoming low-cost iPhone have appeared online, one on a Chinese e-commerce website and another on Verizon's smartphone trade-in page. Spotted by tech blog MySmartPrice, Chinese retailer JD.com has published a placeholder for Apple's so-called "iPhone 9" that includes a teaser image of a veiled smartphone, but other than that it lacks any particularly revealing...

Apple Reportedly Targeting WWDC for Over-Ear Headphones Launch, New 'AirPods X' Later in the Year

Tuesday April 7, 2020 7:00 am PDT by Eric Slivka
Rumors of Apple-branded over-ear headphones have been circulating for quite some time, while more recent rumors have mentioned an "AirPods Pro Lite" that could also be in the works, and Twitter leaker Jon Prosser's recent foray into Apple rumors provides a bit more detail on what we might able to expect for these products. Current Beats Studio3 Wireless and BeatsX On the over-ear side,...

Facebook Launches 'Tuned' Messaging App for Couples

Wednesday April 8, 2020 4:50 am PDT by Tim Hardwick
Facebook has quietly released Tuned, a new messaging app designed to provide a "private space" for couples to connect, reports The Information. Designed by NPE, an experimental group within the company that was established last year, the app encourages couples to share messages, notes, cards, voice memos, photos and Spotify songs with each other, thereby creating a "digital scrapbook" of...

Apple Shares Assembly and Use Instructions for New Face Shields, Shipping 1 Million Per Week to Medical Workers

Tuesday April 7, 2020 8:54 am PDT by Eric Slivka
Following this weekend's news from Tim Cook that Apple is working with its supply chain to produce a million face shields per week for medical workers, the company has shared a support document outlining how to assemble and adjust the shields. The document includes a series of images and animations showing how the simple three-piece product can be assembled for either a regular fit or with...

Some Users Experiencing System Crashes on macOS 10.15.4, Especially During Large File Transfers

Monday April 6, 2020 8:17 am PDT by Joe Rossignol
A sizeable number of Mac users are experiencing occasional system crashes after updating to macOS Catalina version 10.15.4, released a few weeks ago. The crashing issue appears to be most prominent when users attempt to make large file transfers. In a forum post, SoftRAID described the issue as a bug and said that it is working with Apple engineers on a fix for macOS 10.15.5, or a...

2020 iPad Pro Confirmed to Lack a U1 Ultra Wideband Chip

Tuesday April 7, 2020 7:52 am PDT by Eric Slivka
Last week, we laid out evidence suggesting that the just-released iPad Pro models do not contain a U1 Ultra Wideband chip, including the lack of any mention of the chip in tech specs or Apple's press materials, the absence of software support for U1 features, and more. Most tellingly, iFixit was unable to find the chip or related antennas in the device. Daring Fireball's John Gruber has follo...

The New York Times, IFTTT, Medium, and Other Apps Adopt Sign in With Apple Ahead of June 30 Deadline

Sunday April 5, 2020 7:08 pm PDT by Frank McShan
Apps with sign-in functionality, including The New York Times, IFTTT, Medium, and more, have continued to adopt Apple's secure Sign in with Apple feature ahead of a deadline of June 30. The deadline for these apps to support the feature was recently extended from April 30. Sign in with Apple, first introduced in iOS 13, allows users to create accounts for apps and websites using an Apple ID. ...