Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

southerndoc

Contributor
Original poster
Not sure where to post this as I can't find a topic devoted to iCloud (unless I overlooked it).

At 1:23am EDT I received an email with a code along with a text message with the same code. I noticed it this morning when my alarm went off and I haphazardly clicked something on my phone (maybe the Apple allow/don't allow popup, not sure). It could have been a login attempt notification.

I was able to determine that someone had used the Apple recovery option with my email + phone number, but was unable to proceed due to 2FA (yay!). I ended up changing my password when I found this out and selected the option to log out of all devices.

I called Apple support, but they are unable to tell me where the login attempt was made, but was able to tell me that it was from a web page attempt and not from a device.

Microsoft's Outlook and I believe Gmail will list login attempts by IP address along with a map. Why does iCloud not offer this considering the level of security and privacy that Apple seems to tout?
 
Privacy concerns. In addition, if you had been given an IP address of the potential bad actor, that doesn't mean that that is the actual address the action derived from.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.