Jump to content

ICloud: Difference between revisions

From Consumer Rights Wiki
SinexTitan (talk | contribs)
ProductLine
Linka (talk | contribs)
reworked references
Line 22: Line 22:
===2014 Celebrity Photo Leaks===   
===2014 Celebrity Photo Leaks===   


In August 2014, a series of brute-force attacks targeted iCloud accounts, leading to the unauthorized access and release of private photographs belonging to multiple celebrities.<ref>[[wikipedia:2014_celebrity_nude_photo_leak|2014 celebrity nude photo leak]] ([https://web.archive.org/web/20260404193845/https://en.wikipedia.org/wiki/2014_celebrity_nude_photo_leak Archived])</ref> Apple denied that a breach of iCloud itself had occurred, attributing the incident to weak user passwords and phishing attacks.<ref>https://www.theverge.com/2014/9/2/6098107/apple-denies-icloud-breach-celebrity-nude-photo-hack ([http://web.archive.org/web/20250831150803/https://www.theverge.com/2014/9/2/6098107/apple-denies-icloud-breach-celebrity-nude-photo-hack Archived])</ref> However, vulnerabilities allowing brute-force attacks remained unaddressed the following year, raising concerns over iCloud’s security measures.<ref>https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-attack-hacker-exploits-painfully-obvious-password-flaw-1481623 ([http://web.archive.org/web/20251230054034/https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-attack-hacker-exploits-painfully-obvious-password-flaw-1481623 Archived])</ref>
In August 2014, a series of brute-force attacks targeted iCloud accounts, leading to the unauthorized access and release of private photographs belonging to multiple celebrities.<ref>{{cite web |title=2014 celebrity nude photo leak |website=Wikipedia |url=https://en.wikipedia.org/wiki/2014_celebrity_nude_photo_leak |url-status=live |archive-url=https://web.archive.org/web/20260404193845/https://en.wikipedia.org/wiki/2014_celebrity_nude_photo_leak |archive-date=2026-04-04}}</ref> Apple denied that a breach of iCloud itself had occurred, attributing the incident to weak user passwords and phishing attacks.<ref>{{cite web |first=Jacob |last=Kastrenakes |url=https://www.theverge.com/2014/9/2/6098107/apple-denies-icloud-breach-celebrity-nude-photo-hack |title=Apple denies iCloud breach in celebrity nude photo hack |url-status=live |website=The Verge |date=2 Sep 2014 |archive-url=http://web.archive.org/web/20250831150803/https://www.theverge.com/2014/9/2/6098107/apple-denies-icloud-breach-celebrity-nude-photo-hack |archive-date=2025-08-31 }}</ref> However, vulnerabilities allowing brute-force attacks remained unaddressed the following year, raising concerns over iCloud’s security measures.<ref>{{cite web |first=Alistair |last=Charlton |website=International Business Times UK |url=https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-attack-hacker-exploits-painfully-obvious-password-flaw-1481623 |url-status=live |title=iCloud accounts at risk of brute force attack as hacker exploits 'painfully obvious' password flaw |archive-url=http://web.archive.org/web/20251230054034/https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-attack-hacker-exploits-painfully-obvious-password-flaw-1481623 |archive-date=2025-12-30}}</ref>


===Data Hosting in China===   
===Data Hosting in China===   


In 2018, Apple transitioned Chinese users’ iCloud data to local servers in compliance with Chinese data laws.<ref>https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html ([http://web.archive.org/web/20260209094941/https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html Archived])</ref> The move raised concerns regarding government surveillance, as the encryption keys for the data were also stored within China.<ref>https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html ([http://web.archive.org/web/20260209094941/https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html Archived])</ref> Apple stated that this change only affected users residing in mainland China; however, it did not specify how it distinguishes between residents and visitors.<ref>https://support.apple.com/en-us/111754 ([http://web.archive.org/web/20251128142647/https://support.apple.com/en-us/111754 Archived])</ref>
In 2018, Apple transitioned Chinese users’ iCloud data to local servers in compliance with Chinese data laws.<ref name=":0">{{cite web |website=The Hacker News |first=Ravie |last=Lakshmanan |date=18 May 2021 |title=How Apple Gave Chinese Government Access to iCloud Data and Censored Apps |url=https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html |url-status=live |archive-url=http://web.archive.org/web/20260209094941/https://thehackernews.com/2021/05/how-apple-gave-chinese-government.html |archive-date=2026-02-09}}</ref> The move raised concerns regarding government surveillance, as the encryption keys for the data were also stored within China.<ref name=":0"></ref> Apple stated that this change only affected users residing in mainland China; however, it did not specify how it distinguishes between residents and visitors.<ref>{{cite web |website=Apple |url=https://support.apple.com/en-us/111754 |date=15 Apr 2025 |title=Learn more about iCloud in China mainland |url-status=live |archive-url=http://web.archive.org/web/20251128142647/https://support.apple.com/en-us/111754 |archive-date=2025-11-28}}</ref>


===End-to-End Encryption Restrictions in the United Kingdom===   
===End-to-End Encryption Restrictions in the United Kingdom===   


In February 2025, Apple disabled Advanced Data Protection (also known as ADP), its end-to-end encryption feature for iCloud, for users in the United Kingdom. The decision followed a request from the UK government, which sought access to encrypted user data.<ref>https://www.zdnet.com/article/why-apples-disabling-of-icloud-encryption-in-the-uk-is-bad-news-for-everyone/ ([http://web.archive.org/web/20251229142653/https://www.zdnet.com/article/why-apples-disabling-of-icloud-encryption-in-the-uk-is-bad-news-for-everyone/ Archived])</ref>
In February 2025, Apple disabled Advanced Data Protection (also known as ADP), its end-to-end encryption feature for iCloud, for users in the United Kingdom. The decision followed a request from the UK government, which sought access to encrypted user data.<ref>{{cite web |website=ZDNET |first=Adrian |last=Kingsley-Hughes |title=Why Apple's disabling of iCloud encryption in the UK is bad news for everyone |url=https://www.zdnet.com/article/why-apples-disabling-of-icloud-encryption-in-the-uk-is-bad-news-for-everyone/ |url-status=live |date=25 Feb 2025 |archive-url=http://web.archive.org/web/20251229142653/https://www.zdnet.com/web/20251229142653/https:/www.zdnet.com/article/why-apples-disabling-of-icloud-encryption-in-the-uk-is-bad-news-for-everyone/ |archive-date=2025-12-29}}</ref>


==See also==
==See also==

Revision as of 11:17, 26 May 2026


ICloud
Basic Information
Release Year Yes
Product Type Cloud
In Production Yes
Official Website https://icloud.com


iCloud is a cloud storage and cloud computing service provided by Apple. It offers various internet-based services, including iCloud Photos, device backups, and the Find My network.

Consumer-impact summary

Overview of concerns that arise from the conduct towards users of the product (if applicable):

  • User freedom
  • User privacy
  • Business model
  • Market control

Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.


Incidents

This is a list of all consumer-protection incidents related to this product line. Any incidents not mentioned here can be found in the ICloud category.

2014 Celebrity Photo Leaks

In August 2014, a series of brute-force attacks targeted iCloud accounts, leading to the unauthorized access and release of private photographs belonging to multiple celebrities.[1] Apple denied that a breach of iCloud itself had occurred, attributing the incident to weak user passwords and phishing attacks.[2] However, vulnerabilities allowing brute-force attacks remained unaddressed the following year, raising concerns over iCloud’s security measures.[3]

Data Hosting in China

In 2018, Apple transitioned Chinese users’ iCloud data to local servers in compliance with Chinese data laws.[4] The move raised concerns regarding government surveillance, as the encryption keys for the data were also stored within China.[4] Apple stated that this change only affected users residing in mainland China; however, it did not specify how it distinguishes between residents and visitors.[5]

End-to-End Encryption Restrictions in the United Kingdom

In February 2025, Apple disabled Advanced Data Protection (also known as ADP), its end-to-end encryption feature for iCloud, for users in the United Kingdom. The decision followed a request from the UK government, which sought access to encrypted user data.[6]

See also

Link to relevant theme articles or companies with similar incidents.


Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.


References

  1. "2014 celebrity nude photo leak". Wikipedia. Archived from the original on 2026-04-04.
  2. Kastrenakes, Jacob (2 Sep 2014). "Apple denies iCloud breach in celebrity nude photo hack". The Verge. Archived from the original on 2025-08-31.
  3. Charlton, Alistair. "iCloud accounts at risk of brute force attack as hacker exploits 'painfully obvious' password flaw". International Business Times UK. Archived from the original on 2025-12-30.
  4. 4.0 4.1 Lakshmanan, Ravie (18 May 2021). "How Apple Gave Chinese Government Access to iCloud Data and Censored Apps". The Hacker News. Archived from the original on 2026-02-09.
  5. "Learn more about iCloud in China mainland". Apple. 15 Apr 2025. Archived from the original on 2025-11-28.
  6. Kingsley-Hughes, Adrian (25 Feb 2025). "Why Apple's disabling of iCloud encryption in the UK is bad news for everyone". ZDNET. Archived from the original on 2025-12-29.