[gress]

No. It was a labor intensive social engineering attack that couldn't be perpetrated on a wide scale, not a technical breach.

However it's still a weakness and Apple can take steps to improve things.

[JimmaDaRustla]

Hate to be that guy, but social engineering would mean they manipulated the person through social engagement to expose their credentials or information...which may have been possible, but more than likely they guessed or researched answers to the questions...?

[k-mcgrady]

I read something about a phishing attack - would that count as social engineering?

[JimmaDaRustla]

Yes, it gets the actual owner of the account to pass over personal information.

[k-mcgrady]

Ok. One of the stories I read mentioned that may have been how they got the information required to hack the account. Not too sure if it was just speculation or verified in anyway.

[seanflyon]

With such a large group compromised at the same time I would guess it was not phishing.

[gress]

The group wasn't large, and there is no evidence they were compromised at the same time.