Apple Promotes iCloud's Advanced End-to-End Encryption Feature as Data Breaches Increase

Apple today shared a study conducted by MIT professor Dr. Stuart Madnick that found 2.6 billion personal records were compromised by data breaches in the past two years. The study was commissioned by Apple, but the cover page says that the "conclusions and opinions expressed are exclusively those of the author."

Apple advanced security Advanced Data Protection screen Feature Purple
Apple provided an overview of the study in its press release:

The report illustrates that the historic threats to user data that saw the number of data breaches nearly triple between 2013 and 2022, compromising 2.6 billion records over the course of two years, are only getting worse in 2023. In the U.S. alone, there were nearly 20 percent more breaches in just the first nine months of 2023 than in any prior year. The target for cybercriminals was very clear, with a 2023 survey finding that over 80 percent of breaches involved data stored in the cloud. This is after attacks targeting cloud infrastructure nearly doubled from 2021 to 2022.

Additional details can be found in the study: "The Continued Threat to Personal Data: Key Factors Behind the 2023 Increase."

Apple says the study's findings emphasize the need for end-to-end encryption, which iCloud already provides for 14 data categories by default. For users looking for additional protection, Apple offers an optional feature called Advanced Data Protection, which increases the number of iCloud data categories covered by end-to-end encryption to 23, including iCloud Backup, Notes, Photos, Voice Memos, and more.

"Bad actors continue to pour enormous amounts of time and resources into finding more creative and effective ways to steal consumer data, and we won't rest in our efforts to stop them," said Apple's software engineering chief Craig Federighi.

Top Rated Comments

JonathonMH98 Avatar
20 weeks ago
If they really want to promote it they should allow it to be used on older devices.
Score: 18 Votes (Like | Disagree)
eicca Avatar
20 weeks ago
On the one hand, I’m inclined to trust Apple to have the best user data protections anyone could need.

On the other, I believe they’re so arrogant they would never disclose if a data breach actually happened.
Score: 14 Votes (Like | Disagree)
cloudyo Avatar
20 weeks ago
ADP protects against breaches at Apple. It doesn’t protect against breaches of user devices. Thats a key point that might get lost.
Score: 8 Votes (Like | Disagree)
ChrisA Avatar
20 weeks ago

So are there any drawbacks to enabling ADP?
Yes. If you forget the password the data is gone forever. There is no way to click "I forgot my password" and set a new one. If you are incapacitated your family will never be able to access the data. You would need to come up with some secure method of storing the key locally.

However, if you let Apple have the password, you can recover it if you somehow prove to Apple who you are. Apple's standard of proof is rather low but it is a compromise to usability.
Score: 7 Votes (Like | Disagree)
chriscl Avatar
20 weeks ago
If only you could use it on devices it supports, and not others - if you have an older device; in my case, a perfectly functional six-year old MacBook - I cannot enable ADP at all, because this one device is not „compatible“.

Forced obsolescence is still a thing, if you‘re Apple.
Score: 6 Votes (Like | Disagree)
xraydoc Avatar
20 weeks ago

So are there any drawbacks to enabling ADP?
I locked everything up with a few YubiKeys (the USB-C + NFC version).

I have one on my work key ring and keep two at home in different locations.

The only real drawback is that I've got to insert the YubiKey into the USB port of the computers at work if I need to access iCloud from one of the desktop PCs. Sometimes I need to upload larger documents or folders from my work PC to my iCloud drive, so when I log in to iCloud from my desktop PC, I have to insert my YubiKey. But I'm totally fine with this arrangement.

Otherwise, I've had no issues at all after turning on ADP. It's otherwise invisible when using my Macs and iDevices.

I did have to make sure that all the devices connected to my iCloud account were modern and up to date (so things like older AppleTVs), but that wasn't too much of an issue to be honest, and was a good excuse to upgrade the bedroom TV.

I was expecting to have to have to insert or tap my YubiKey to my new iPhone 15 Pro when I upgraded from my previous phone, but I didn't have to. Authorizing from the old phone was apparently enough.

But I'm satisfied that if somehow my iCloud password leaks that no one will be able to get in around the 2FA and YubiKey.

My data is far more likely to be leaked from some business that I use rather than anything I store on iCloud.
Score: 6 Votes (Like | Disagree)

Popular Stories

iOS 18 Siri Integrated Feature

iOS 18 Rumored to Add These 10 New Features to Your iPhone

Wednesday April 24, 2024 2:05 pm PDT by
Apple is set to unveil iOS 18 during its WWDC keynote on June 10, so the software update is a little over six weeks away from being announced. Below, we recap rumored features and changes planned for the iPhone with iOS 18. iOS 18 will reportedly be the "biggest" update in the iPhone's history, with new ChatGPT-inspired generative AI features, a more customizable Home Screen, and much more....
Apple Silicon AI Optimized Feature Siri

Apple Releases Open Source AI Models That Run On-Device

Wednesday April 24, 2024 3:39 pm PDT by
Apple today released several open source large language models (LLMs) that are designed to run on-device rather than through cloud servers. Called OpenELM (Open-source Efficient Language Models), the LLMs are available on the Hugging Face Hub, a community for sharing AI code. As outlined in a white paper [PDF], there are eight total OpenELM models, four of which were pre-trained using the...
maxresdefault

Apple Announces 'Let Loose' Event on May 7 Amid Rumors of New iPads

Tuesday April 23, 2024 7:11 am PDT by
Apple has announced it will be holding a special event on Tuesday, May 7 at 7 a.m. Pacific Time (10 a.m. Eastern Time), with a live stream to be available on Apple.com and on YouTube as usual. The event invitation has a tagline of "Let Loose" and shows an artistic render of an Apple Pencil, suggesting that iPads will be a focus of the event. Subscribe to the MacRumors YouTube channel for more ...
macbook pro purple february

Best Buy Introduces Record Low Prices on Apple's M3 MacBook Pro for Members

Thursday April 25, 2024 7:41 am PDT by
Best Buy is discounting a collection of M3 MacBook Pro computers today, this time focusing on the 14-inch version of the laptop. Every deal in this sale requires you to have a My Best Buy Plus or Total membership, although non-members can still get solid second-best prices on these MacBook Pro models. Note: MacRumors is an affiliate partner with Best Buy. When you click a link and make a...
apple id account

Apple ID Accounts Logging Out Users and Requiring Password Reset

Saturday April 27, 2024 12:41 am PDT by
There are widespread reports of Apple users being locked out of their Apple ID overnight for no apparent reason, requiring a password reset before they can log in again. Users say the sudden inexplicable Apple ID sign-out is occurring across multiple devices. When they attempt to sign in again they are locked out of their account and asked to reset their password in order to regain access. ...
macos sonoma feature purple green

Apple's Regular Mac Base RAM Boosts Ended When Tim Cook Took Over

Friday April 26, 2024 6:34 am PDT by
Apple used to regularly increase the base memory of its Macs up until 2011, the same year Tim Cook was appointed CEO, charts posted on Mastodon by David Schaub show. Earlier this year, Schaub generated two charts: One showing the base memory capacities of Apple's all-in-one Macs from 1984 onwards, and a second depicting Apple's consumer laptop base RAM from 1999 onwards. Both charts were...