So my iTunes account has been hijacked again

[Andrew Wonser]

Had my account hijacked last month as well, as did others (Some lost as much as $100). This time they were much cleverer and purchased a free app that had in-app purchases. So I'm most likely out $15 because they were in-app. Not a whole lot but it's still irritating. Both times have been Chinese developed games. I had changed my password from a single word to a word plus numbers and letters. My touch was jailbroken and I had updated over wifi a couple times so it might have happened because of that. Went ahead and updated it which removed the jailbreak. I know my computers are both clean (Haven't clicked on anything suspect, haven't opened any mail except when I was resetting a password, haven't visited any off the path websites) and earlier this month I completely wiped all permissions for iTunes. Also my account is not linked to a credit/debit card.

Anyone have any other suggestions for things I can do to prevent this from happening again? I'm also thinking I might as well purchase something that will kill the remaining credit that I have, if for no other reason than to not lose any more money.

[Nonnahob]

Ever seen that xkcd about passwords? Ancient green furnace garage as a password is infinitely harder than TrouBad0r41! Do yourself a favor and change it again to a few words.

[Zarkon]

Contact Apple support and tell them you have unauthorized purchases.  I can't promise what will happen, but it's worth trying.  Other than standard security stuff (and Apple has an article about that exact thing), I don't know what to tell you (that I wouldn't later get in trouble for)

[Bullwinkle]

I just got the "Password needs to be reset for security reasons" message myself.  I haven't reset yet, so I don't know if any damage has been done (I assume not, since I probably wouldn't get the message if they got in).

I tried to find out what happened that caused me to get that message, but "Customer Care" told me I'd have to pay to find out, basically, or I could send an email and wait.