"Apple users are being locked out of their Apple IDs with no explanation"

Absolutely. There’s no excuse for not at least acknowledging the reports and saying they’re looking into it.

3 Likes

That’s got to be a bad feeling. Might feel like losing one’s wallet or keys.

Me too. At 4 AM last saturday in Spain

  1. Apple’s famous history of keeping mum about things we would like to know. :expressionless:

  2. Apple is still dealing with the problem, or the fallout from the problem, or the attacker behind the problem. :grimacing:

  3. Apple is too busy pummeling the employee who “tripped over the power cord” that caused the failure. :rofl:

5 Likes

According to Article 33 of the General Data Protection Regulation (GDPR), if a personal data breach occurs, Apple must promptly notify the supervisory authority (the relevant data protection authority) within 72 hours of becoming aware of the breach.
However, if the breach is unlikely to result in a risk to individuals’ rights and freedoms, the notification deadline may be extended.
The notification should include details about the breach and its impact.
In addition to notifying the supervisory authority, Apple is also obligated to inform individual users affected by the breach.
This means that if your personal data is involved in the breach, Apple would need to notify you directly about the incident.

1 Like

They should be using the USB-C to MagSafe cable. :rofl:

3 Likes

The text you have quoted isn’t correct, But I’m unsure of your source.

You only need to report a breach of personal data if it’s likely to cause a risk to the rights and freedoms of individuals. If you come to the conclusion that the breach would not cause a risk to the Rights and Freedoms of the Data Subjects, you don’t need to legally report the breach either to the Supervisory Authority or the Data Subjects, but must keep records, including details of the decision not to report.

Speaking about the UK Supervisory Authority (the ICO), if you try and report something they don’t expect you to, they actively discourage you from reporting it.

GDPR Article 33 actually says:

In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority competent in accordance with Article 55, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. [Emphasis is mine]

Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.

1 Like

Regardless of legal obligation, it would be beneficial for Apple to provide its users with a comprehensive explanation regarding the root cause of this significant issue.

1 Like

It is entirely possible that Apple doesn’t know the root cause of this issue. Sometime all you know is you have a problem and nothing else.

But the mainstream media around the world has this story and my guess is Apple will have something to say by the time the world wakes up tomorrow morning.

1 Like

I agree with this. Apple should have some sort of status out there, even just as a holding pattern. “We’re aware that some people have had issues with their AppleIDs, we’re currently investigating.”

1 Like

Same here. I had to reset my Apple ID passcode. Afterwards my TV, iPad, watch and iPhone were okay. Except my iPhone ended up with a blurry home screen and I couldn’t hard reset it until I found a suggestion on Apple’s Community forum to remove the case and try again. That worked, and I could reset the phone. The case (a nice PeakDesign) went back on and everything is fine in the world again.
I also found an Apple Insider article from a month ago that explained that it was a MFA phishing attack/bombing and what to do.

2 Likes

And there’s still been nothing from Apple. Disappointing

I’m glad I didn’t bet on my prediction.

3 Likes