Become a MacRumors Supporter for $25/year with no ads, private forums, and more!

Apple Developer Site Down as Developers Report Possible Hack [Update: Apple Says No Breach]

MacRumors

macrumors bot
Original poster
Apr 12, 2001
51,581
13,209



Apple's Developer site has been down for a couple of hours now, and while it originally seemed like the outage was related to maintenance, a few reports trickling in from developers suggests there could potentially be another cause.

Several developers are reporting that all of their developer account addresses have been updated with an address in Russia, perhaps indicating some kind of breach or serious internal error. According to multiple developer reports, their accounts list a Russian address instead of their correct address.


All my teams on Developer Member Center at @apple are registered in Russia. Nice. pic.twitter.com/kyYyRyLTR7 - Dal Rupnik (@TheLegoless) September 6, 2017

It's not clear what's going on with the developer site at this time. We have reached out to Apple for more information and will update this post should any new information become available.

@apple developer account addresses are all showing an address in Russia... - David Negron (@dave_negron) September 6, 2017
Back in 2013, Apple's Developer Center was breached by hackers and was taken offline for several days as Apple worked to fix the breach, rebuild the developer database, and implement better security practices. At that time, Apple said sensitive personal information was encrypted and inaccessible, but some developers' names, mailing addresses, and email addresses may have been leaked.

Update: The Apple Developer site is now back up. No reason has been provided for the outage or the appearance of Russian addresses on some accounts.

Update 2: In a statement provided to MacRumors and sent out to affected developers, Apple's Developer Program support staff says there was no security breach. Instead, there was a bug in the account management application that caused address information to be temporarily displayed incorrectly.
"Due to a bug in our account management application, your address information was temporarily displayed incorrectly in your account details on the Apple Developer website. The same incorrect address was displayed to all affected developers. The underlying code-level bug was quickly resolved and your address information now shows correctly. There was no security breach and at no time were the Apple Developer website, applications, or services compromised; nor were any of your Apple Developer membership details accessed by, shared with, or displayed to anyone."

Article Link: Apple Developer Site Down as Developers Report Possible Hack [Update: Apple Says No Breach]
 

cjboffoli97

macrumors member
Oct 4, 2005
77
158
Seattle, WA
I use two-factor authentication to access my developer account. I didn't know it was optional. If this story pans out as reported, I'd be curious to know if the hackers were able to circumvent it.
 
Comment

Apple_Robert

Contributor
Sep 21, 2012
22,652
26,254
In the middle of several books.
I hope my account details are still safe.

Edited to add: I can't remember if I had two-factor turned on for the Developer account, albeit it is turned on for the Applied site and the rest of my Apple account.
 
Comment

BlueCreek

macrumors regular
Aug 28, 2014
245
397
Speaking of that, I noticed earlier in the day I had like 10 app updates... i updated them, thinking nothing of it...

Now I'm wondering... These werent just smallfry apps, but big name apps too.

Yeah I currently have 22 which are automatically updating right now, this is probably due to the fact iOS 11 is out in 6 days.
 
Comment

daveak

macrumors 6502
Jun 28, 2009
295
325
Durham, UK
Speaking of that, I noticed earlier in the day I had like 10 app updates... i updated them, thinking nothing of it...

Now I'm wondering... These werent just smallfry apps, but big name apps too.

There would be more than the developer site down if this were an issue. Apple would be completely screwed if someone managed to get access to the private signing keys for apps and todays beta updates. Given nothing else is down, wouldn't worry.
 
Comment

ddkkpp

macrumors 6502
May 28, 2011
299
111
Irresponsible macrumors for making up a possible outcome that there is no evidence of having happened.

Look at the whole quote:

Back in 2013, Apple's Developer Center was breached by hackers and was taken offline for several days as Apple worked to fix the breach, rebuild the developer database, and implement better security practices. At that time, Apple said sensitive personal information was encrypted and inaccessible, but some developers' names, mailing addresses, and email addresses may have been leaked.
now read the first 3 words. that'll give you context for the last 3.
 
Last edited by a moderator:
Comment
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.