Statement from Apple:
Quote:
|
After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet. None of the cases we have investigated has resulted from any breach in any of Apple’s systems including iCloud or Find my iPhone.
|
There's enough nonspecificity in there to give Apple some wiggle room over what "breach" means, but the reference to "user names, passwords and security questions" means my money is still on social engineering for this one.
There's a reason celebs get targeted for this stuff and it ain't because we all wonder what Jennifer Lawrence looks like in sexy poses; I have youtube for that. It's because the tabloid news industry has ensured that any given celeb's birthday, mother's maiden name, highschool, first car, and pet's name are all matters of public record.
Short version: 2FA is there, use it.
Edit update Oops - no 2FA available for iCloud backups, Photo Stream, Find My iPhone.
http://techcrunch.com/2014/09/02/app...photo-streams/