I am an idiot and used my Apple ID email on some other services. I’ve since started using aliases since private relay came out but the email does remain on some services. This is probably how it got leaked.
Lesson: don’t use your main ID emails anywhere else.
They also somehow got my password which I may have re-used… again, I’ve started generating emails a while ago but a few may have remained in the wild.
Luckily my 2 factor works.
I’ve reset the non-generated passwords on-device and set up a new email that I won’t use anywhere else.
It’s a good reminder to tidy up your security situation!
View quoted note →